CVEvulnerability

CVE-2022-26859

7.0 HIGH Published 2022-09-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-09-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-367

Description

Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM.

Affected configurations

• dell alienware m15 r6 firmware (< 1.8.0) • dell chengming 3980 firmware (< 2.21.0) • dell chengming 3988 firmware (< 1.9.0) • dell chengming 3990 firmware (< 1.8.2) • dell chengming 3991 firmware (< 1.8.2) • dell g15 5510 firmware (< 1.8.0) • dell g15 5511 firmware (< 1.9.0) • dell g3 15 3590 firmware (< 1.16.0) • dell g3 3500 firmware (< 1.12.0) • dell g3 3579 firmware (< 1.19.0) • dell g5 15 5587 firmware (< 1.19.0) • dell g5 15 5590 firmware (< 1.18.0) • dell g5 5000 firmware (< 1.5.1) • dell g5 5090 firmware (< 1.12.0) • dell g5 5500 firmware (< 1.12.0) • dell g7 7500 firmware (< 1.12.0) • dell g7 7588 firmware (< 1.19.0) • dell g7 17 7700 firmware (< 1.12.0) • dell g7 17 7790 firmware (< 1.18.0) • dell latitude 3480 firmware (< 1.19.1) • dell latitude 3580 firmware (< 1.19.1) • dell edge gateway 3000 firmware (< 1.8.0) • dell edge gateway 5000 firmware (< 1.18.0) • dell embedded box pc 3000 firmware (< 1.14.0) • dell embedded box pc 5000 firmware (< 1.15.0) • dell inspiron 13 5378 firmware (< 1.36.0) • dell inspiron 13 5379 firmware (< 1.19.0) • dell inspiron 13 7378 firmware (< 1.36.0) • dell inspiron 14 3467 firmware (< 2.18.0) • dell inspiron 14 3476 firmware (< 1.16.0) • dell inspiron 15 3567 firmware (< 2.18.0) • dell inspiron 15 5566 firmware (< 1.17.0) • dell inspiron 15 5578 firmware (< 1.36.0) • dell inspiron 15 5579 firmware (< 1.19.0) • dell inspiron 15 5582 firmware (< 2.13.0) • dell inspiron 15 7572 firmware (< 1.10.0) • dell inspiron 17 7773 firmware (< 1.16.0) • dell inspiron 15 gaming 7577 firmware (< 1.19.0) • dell inspiron 3470 firmware (< 2.21.0) • dell inspiron 3471 firmware (< 1.9.0) • dell inspiron 3480 firmware (< 1.17.0) • dell inspiron 3481 firmware (< 1.16.0) • dell inspiron 3490 firmware (< 1.16.0) • dell inspiron 3493 firmware (< 1.19.0) • dell inspiron 3501 firmware (< 1.11.0) • dell inspiron 3511 firmware (< 1.8.0) • dell inspiron 3576 firmware (< 1.16.0) • dell inspiron 3580 firmware (< 1.17.0) • dell inspiron 3581 firmware (< 1.16.0) • dell inspiron 3590 firmware (< 1.16.0) • dell inspiron 3593 firmware (< 1.19.0) • dell inspiron 3670 firmware (< 2.21.0) • dell inspiron 3671 firmware (< 1.9.0) • dell inspiron 3780 firmware (< 1.17.0) • dell inspiron 3781 firmware (< 1.16.0) • dell inspiron 3790 firmware (< 1.16.0) • dell inspiron 3793 firmware (< 1.19.0) • dell inspiron 3880 firmware (< 1.8.2) • dell inspiron 3881 firmware (< 1.8.3) • dell inspiron 3891 firmware (< 1.4.1) … and 339 more

Related

Weakness · CWE (1)

  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness

References