CVE-2022-22567

published 2022-02-09

CVE-2022-22567: Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated…

medium 5.1 CVSS 3.1

AV L AC L PR H UI N S U C N I H A L

Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware.

Affected

217 ranges · showing 25

Vendor	Product	Version range	Fixed in
dell	alienware_area_51m_r1_firmware	< 1.16.0	1.16.0
dell	alienware_area_51m_r2_firmware	< 1.11.0	1.11.0
dell	alienware_m15_r3_firmware	< 1.12.0	1.12.0
dell	alienware_m15_r4_firmware	< 1.6.2	1.6.2
dell	alienware_m15_r6_firmware	< 1.6.0	1.6.0
dell	alienware_m15_r6_firmware	< 1.8.0	1.8.0
dell	alienware_m17_r3_firmware	< 1.12.0	1.12.0
dell	alienware_m17_r4_firmware	< 1.6.2	1.6.2
dell	chengming_3990_firmware	< 1.6.0	1.6.0
dell	chengming_3991_firmware	< 1.6.0	1.6.0
dell	cpg_bios	>= unspecified < 1.15	1.15
dell	g15_5510_firmware	< 1.8.0	1.8.0
dell	g15_5511_firmware	< 1.9.0	1.9.0
dell	g3_3500_firmware	< 1.12.0	1.12.0
dell	g3_3590_firmware	< 1.14.0	1.14.0
dell	g5_5000_firmware	< 1.4.0	1.4.0
dell	g5_5500_firmware	< 1.12.0	1.12.0
dell	g7_7500_firmware	< 1.11.1	1.11.1
dell	g7_7700_firmware	< 1.11.1	1.11.1
dell	inspiron_14_5410_firmware	< 2.6.1	2.6.1
dell	inspiron_14_5418_firmware	< 2.6.1	2.6.1
dell	inspiron_15_5510_firmware	< 2.6.1	2.6.1
dell	inspiron_15_5518_firmware	< 2.6.1	2.6.1
dell	inspiron_3490_firmware	< 1.15.0	1.15.0
dell	inspiron_3493_firmware	< 1.18.0	1.18.0

CWE-345