Lucene search
DellCVELIST:CVE-2022-32490HistoryJan 18, 2023 - 5:59 a.m.
CVE-2022-32490
2023-01-1805:59:52
CWE-20
dell
www.cve.org
4
dell bios
input validation
arbitrary code execution
smram
cve-2022-32490
CVSS3
7.5
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0
Percentile
5.1%
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "BIOS",
"vendor": "Dell",
"versions": [
{
"status": "affected",
"version": "1.8"
}
]
}
]References
Related
nessus
nessus
Dell Client BIOS Improper Input Validation (DSA-2022-249)
2022-11-10 00:00:00
cve
cve
CVE-2022-32490
2023-01-18 06:15:11
nvd
nvd
CVE-2022-32490
2023-01-18 06:15:11
prion
prion
Input validation
2023-01-18 06:15:00
CVSS3
7.5
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0
Percentile
5.1%
Related for CVELIST:CVE-2022-32490