CVE-2022-29083

published 2022-08-09

CVE-2022-29083: Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical access to the system could potentially…

medium 6.8 CVSS 3.1

AV P AC L PR N UI N S U C H I H A H

Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability by bypassing drive security mechanisms in order to gain access to the system.

Affected

109 ranges · showing 25

Vendor	Product	Version range	Fixed in
dell	chengming_3980_firmware	< 2.23.0	2.23.0
dell	chengming_3990_firmware	< 1.11.0	1.11.0
dell	chengming_3991_firmware	< 1.11.0	1.11.0
dell	cpg_bios	>= unspecified < 9-12	9-12
dell	g3_3579_firmware	< 1.21.0	1.21.0
dell	g3_3779_firmware	< 1.21.0	1.21.0
dell	g5_5000_firmware	< 1.7.0	1.7.0
dell	g5_5090_firmware	< 1.14.0	1.14.0
dell	g5_5587_firmware	< 1.21.0	1.21.0
dell	g7_7588_firmware	< 1.21.0	1.21.0
dell	inspiron_3470_firmware	< 2.23.0	2.23.0
dell	inspiron_3480_firmware	< 1.19.0	1.19.0
dell	inspiron_3493_firmware	< 1.19.0	1.19.0
dell	inspiron_3501_firmware	< 1.11.0	1.11.0
dell	inspiron_3580_firmware	< 1.19.0	1.19.0
dell	inspiron_3593_firmware	< 1.19.0	1.19.0
dell	inspiron_3670_firmware	< 2.23.0	2.23.0
dell	inspiron_3780_firmware	< 1.19.0	1.19.0
dell	inspiron_3790_firmware	< 1.16.0	1.16.0
dell	inspiron_3793_firmware	< 1.19.0	1.19.0
dell	inspiron_3880_firmware	< 1.11.0	1.11.0
dell	inspiron_3881_firmware	< 1.11.0	1.11.0
dell	inspiron_5310_firmware	< 2.6.1	2.6.1
dell	inspiron_5410_firmware	< 2.6.1	2.6.1
dell	inspiron_5493_firmware	< 1.19.0	1.19.0

CWE-287