CVE-2022-22566

published 2022-02-09

CVE-2022-22566: Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical…

Priority P4 33 high 7.2 CVSS 3.1

AV P AC L PR H UI N S C C H I H A H

Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device.

Affected

217 ranges · showing 25

Vendor	Product	Version range	Fixed in
dell	alienware_area_51m_r1_firmware	< 1.16.0	1.16.0
dell	alienware_area_51m_r2_firmware	< 1.11.0	1.11.0
dell	alienware_m15_r3_firmware	< 1.12.0	1.12.0
dell	alienware_m15_r4_firmware	< 1.6.2	1.6.2
dell	alienware_m15_r6_firmware	< 1.6.0	1.6.0
dell	alienware_m15_r6_firmware	< 1.8.0	1.8.0
dell	alienware_m17_r3_firmware	< 1.12.0	1.12.0
dell	alienware_m17_r4_firmware	< 1.6.2	1.6.2
dell	chengming_3990_firmware	< 1.6.0	1.6.0
dell	chengming_3991_firmware	< 1.6.0	1.6.0
dell	cpg_bios	>= unspecified < 1.15	1.15
dell	g15_5510_firmware	< 1.8.0	1.8.0
dell	g15_5511_firmware	< 1.9.0	1.9.0
dell	g3_3500_firmware	< 1.12.0	1.12.0
dell	g3_3590_firmware	< 1.14.0	1.14.0
dell	g5_5000_firmware	< 1.4.0	1.4.0
dell	g5_5500_firmware	< 1.12.0	1.12.0
dell	g7_7500_firmware	< 1.11.1	1.11.1
dell	g7_7700_firmware	< 1.11.1	1.11.1
dell	inspiron_14_5410_firmware	< 2.6.1	2.6.1
dell	inspiron_14_5418_firmware	< 2.6.1	2.6.1
dell	inspiron_15_5510_firmware	< 2.6.1	2.6.1
dell	inspiron_15_5518_firmware	< 2.6.1	2.6.1
dell	inspiron_3490_firmware	< 1.15.0	1.15.0
dell	inspiron_3493_firmware	< 1.18.0	1.18.0

CVSS provenance

nvd v3.1 7.2 HIGH CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

nvd v2.0 7.2 HIGH AV:L/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-1190