Lucene search

DellCVELIST:CVE-2022-24410

HistoryFeb 10, 2023 - 10:34 a.m.

CVE-2022-24410

2023-02-1010:34:58

CWE-200

dell

www.cve.org

dell

bios

vulnerability

debug interfaces

information exposure

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.7%

JSON

Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system configuration could potentially exploit this vulnerability to read system information via debug interfaces.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "CPG BIOS",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "All supported versions"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000205719/dsa-2022-325

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.7%

JSON

Related for CVELIST:CVE-2022-24410