CVE-2022-34383 — Command Injection in Dell Edge Gateway 5200

CWE-77 — Command InjectionCWE-78 — OS Command Injection3 documents3 sources
Severity
8.2HIGHNVD
CNA8.1
EPSS
0.5%
top 35.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Dell Edge Gateway 5200Dell Edge Gateway 5200 Firmware
Timeline
PublishedAug 31
Latest updateSep 1

Description

Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability. A local malicious user may potentially exploit this vulnerability by using an SMI to bypass PMC mitigation and gain arbitrary code execution during SMM.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 1.5 | Impact: 6.0

Affected Packages2 packages

▶CVEListV5dell/edge_gateway_5200unspecified — 1.03.10

Patches

Patch: www.dell.com ↗Patch: www.dell.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-qx9p-wm6x-9cmf: Dell Edge Gateway 5200 (EGW) versions before 1↗2022-09-01
▶
CVEList
CVE-2022-34383: Dell Edge Gateway 5200 (EGW) versions before 1↗2022-08-31
▶
CVE-2022-34383 — Command Injection in Dell | cvebase