CVEvulnerability
CVE-2022-22567
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-02-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L
- CVSS 3.1 ([email protected])
- 5.1 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L
- CVSS 2.0 ([email protected])
- 3.6 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-345
Description
Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware.
Affected configurations
• dell alienware area 51m r1 firmware (< 1.16.0)
• dell alienware area 51m r2 firmware (< 1.11.0)
• dell alienware m15 r3 firmware (< 1.12.0)
• dell alienware m15 r4 firmware (< 1.6.2)
• dell alienware m15 r6 firmware (< 1.6.0)
• dell alienware m15 r6 firmware (> 1.6.0 < 1.8.0)
• dell alienware m17 r3 firmware (< 1.12.0)
• dell alienware m17 r4 firmware (< 1.6.2)
• dell chengming 3990 firmware (< 1.6.0)
• dell chengming 3991 firmware (< 1.6.0)
• dell g15 5510 firmware (< 1.8.0)
• dell g15 5511 firmware (< 1.9.0)
• dell g3 3500 firmware (< 1.12.0)
• dell g3 3590 firmware (< 1.14.0)
• dell g5 5000 firmware (< 1.4.0)
• dell g5 5500 firmware (< 1.12.0)
• dell g7 7500 firmware (< 1.11.1)
• dell g7 7700 firmware (< 1.11.1)
• dell inspiron 14 5410 firmware (< 2.6.1)
• dell inspiron 14 5418 firmware (< 2.6.1)
• dell inspiron 15 5510 firmware (< 2.6.1)
• dell inspiron 15 5518 firmware (< 2.6.1)
• dell inspiron 3490 firmware (< 1.15.0)
• dell inspiron 3493 firmware (< 1.18.0)
• dell inspiron 3501 firmware (< 1.11.0)
• dell inspiron 3511 firmware (< 1.8.0)
• dell inspiron 3590 firmware (< 1.15.0)
• dell inspiron 3593 firmware (< 1.18.0)
• dell inspiron 3790 firmware (< 1.15.0)
• dell inspiron 3793 firmware (< 1.18.0)
• dell inspiron 3880 firmware (< 1.6.0)
• dell inspiron 3881 firmware (< 1.6.0)
• dell inspiron 3891 firmware (< 1.4.1)
• dell inspiron 5300 firmware (< 1.10.0)
• dell inspiron 5301 firmware (< 1.12.0)
• dell inspiron 5310 firmware (< 2.6.1)
• dell inspiron 5390 firmware (< 1.14.0)
• dell inspiron 5391 firmware (< 1.15.0)
• dell inspiron 5400 2-in-1 firmware (< 1.10.0)
• dell inspiron 5400 aio firmware (< 1.6.0)
• dell inspiron 5401 firmware (< 1.10.0)
• dell inspiron 5401 aio firmware (< 1.6.0)
• dell inspiron 5402 firmware (< 1.9.0)
• dell inspiron 5406 2-in-1 firmware (< 1.9.0)
• dell inspiron 5408 firmware (< 1.10.0)
• dell inspiron 5409 firmware (< 1.9.0)
• dell inspiron 5410 firmware (< 2.6.1)
• dell inspiron 5490 firmware (< 1.16.1)
• dell inspiron 5490 aio firmware (< 1.11.0)
• dell inspiron 5491 2-in-1 firmware (< 1.12.1)
• dell inspiron 5493 firmware (< 1.18.0)
• dell inspiron 5494 firmware (< 1.15.0)
• dell inspiron 5498 firmware (< 1.16.1)
• dell inspiron 5501 firmware (< 1.10.0)
• dell inspiron 5502 firmware (< 1.9.0)
• dell inspiron 5508 firmware (< 1.10.0)
• dell inspiron 5509 firmware (< 1.9.0)
• dell inspiron 5583 firmware (< 1.16.0)
• dell inspiron 5584 firmware (< 1.16.0)
• dell inspiron 5590 firmware (< 1.16.1)
… and 156 more
Related
Weakness · CWE (1)
- CWE-345 Insufficient Verification of Data Authenticity weakness
References
- https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028 Vendor Advisory
- https://www.dell.com/support/kbdoc/en-us/000195905/dsa-2022-028 Vendor Advisory