The vulnerability of BIOS microprogramming software in Dell laptops, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

🗓️ 24 Jun 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Dell laptops BIOS software has input data validation flaws that enable arbitrary code execution.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-26862	21 Jun 202200:00	–	attackerkb
Circl	CVE-2022-26862	23 Jun 202222:36	–	circl
CNNVD	Dell BIOS 输入验证错误漏洞	23 Jun 202200:00	–	cnnvd
CNVD	Dell BIOS Input Validation Error Vulnerability (CNVD-2022-85078)	27 Jun 202200:00	–	cnvd
CVE	CVE-2022-26862	23 Jun 202217:55	–	cve
Cvelist	CVE-2022-26862	23 Jun 202217:55	–	cvelist
EUVD	EUVD-2022-31411	3 Oct 202520:07	–	euvd
NVD	CVE-2022-26862	23 Jun 202218:15	–	nvd
OSV	CVE-2022-26862	23 Jun 202218:15	–	osv
Prion	Input validation	23 Jun 202218:15	–	prion

Vulners

Node

dell_technologies alienware_m15_ryzen_edition_r5Range<1.5.0

OR

dell_technologies g15_5515Range<1.6.0

OR

dell_technologies g5_se_5505Range<1.11.0

OR

dell_technologies inspiron_27_7775Range<2.16.1

OR

dell_technologies inspiron_14_5425Range<1.2.1

OR

dell_technologies inspiron_3275Range<1.9.0

OR

dell_technologies inspiron_3475Range<1.9.0

OR

dell_technologies inspiron_11_3180Range<1.4.4

OR

dell_technologies inspiron_11_3185_2-in-1Range<1.4.4

OR

dell_technologies inspiron_3195_2-in-1Range<1.4.1

OR

dell_technologies inspiron_3505Range<1.6.0

OR

dell_technologies inspiron_15_3515Range<1.5.0

OR

dell_technologies inspiron_15_3525Range<1.3.0

OR

dell_technologies inspiron_3585Range<1.7.0

OR

dell_technologies inspiron_3595Range<1.3.0

OR

dell_technologies inspiron_3785Range<1.7.0

OR

dell_technologies inspiron_5405Range<1.7.0

OR

dell_technologies inspiron_24_5415_all-in-oneRange<1.5.0

OR

dell_technologies inspiron_5415Range<1.9.0

OR

dell_technologies inspiron_5485Range<2.8.0

OR

dell_technologies inspiron_5485_2-in-1Range<2.8.0

OR

dell_technologies inspiron_5505Range<1.7.0

OR

dell_technologies inspiron_5515Range<1.9.0

OR

dell_technologies inspiron_5575Range<1.6.0

OR

dell_technologies inspiron_15_5585Range<2.8.0

OR

dell_technologies inspiron_13_7375_2-in-1Range<1.7.0

OR

dell_technologies inspiron_7405_2-in-1Range<1.8.0

OR

dell_technologies inspiron_7415Range<1.9.0

OR

dell_technologies inspiron_14_7425_2-in-1Range<1.2.1

OR

dell_technologies vostro_3405Range<1.6.0

OR

dell_technologies vostro_3515Range<1.5.0

OR

dell_technologies vostro_3525Range<1.3.0

OR

dell_technologies vostro_5415Range<1.9.0

OR

dell_technologies vostro_5515Range<1.9.0

OR

dell_technologies vostro_5625Range<1.2.1

Source	Link
dell	www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-26862
web	www.web.nvd.nist.gov/view/vuln/detail

24 Jun 2022 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 36.3

CVSS 26.4

EPSS0.00266

dell laptops bios software input data validation arbitrary code execution