Command injection

2022-08-3120:15:00

PRIOn knowledge base

www.prio-n.com

dell

edge gateway 5200

command injection

vulnerability

operating system

local user

smi

pmc mitigation

arbitrary code execution

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.3%

JSON

Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability. A local malicious user may potentially exploit this vulnerability by using an SMI to bypass PMC mitigation and gain arbitrary code execution during SMM.

CPENameOperatorVersion
edge_gateway_5200_firmwarelt1.03.10

CPE	Name	Operator	Version
	edge_gateway_5200_firmware	lt	1.03.10

References

www.dell.com/support/kbdoc/en-us/000202711