Lucene search

K

Inspiron 5510 Firmware Security Vulnerabilities

cve
cve

CVE-2022-26858

Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls.

7.8CVSS

7.5AI Score

0.0004EPSS

2022-09-06 09:15 PM
49
3
cve
cve

CVE-2022-26859

Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM.

7CVSS

6.6AI Score

0.0004EPSS

2022-09-06 09:15 PM
32
4
cve
cve

CVE-2022-26860

Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM.

7.8CVSS

7.9AI Score

0.001EPSS

2022-09-06 09:15 PM
29
3
cve
cve

CVE-2022-26861

Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.

7.9CVSS

7.6AI Score

0.0004EPSS

2022-09-06 09:15 PM
30
2
cve
cve

CVE-2022-29083

Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability by bypassing drive security mechanisms in order to gain access to the system.

6.8CVSS

6.7AI Score

0.001EPSS

2022-08-09 09:15 PM
39
2
cve
cve

CVE-2022-32482

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable.

5.6CVSS

5AI Score

0.0004EPSS

2023-02-01 06:15 AM
30
cve
cve

CVE-2022-34400

Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM during SMM.

7.1CVSS

7AI Score

0.0004EPSS

2023-02-01 05:15 AM
30
cve
cve

CVE-2022-34403

Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.

8.8CVSS

8.9AI Score

0.0004EPSS

2023-02-01 06:15 AM
22
cve
cve

CVE-2022-46752

Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.

4.6CVSS

4.7AI Score

0.001EPSS

2023-03-08 05:15 PM
44