PT-2022-15526 · Dell · Dell Poweredge Server Bios+2

Yngweijw · Published 2022-04-21 · Updated 2022-09-01 · CVE-2022-22558

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerEdge Server BIOS (affected versions not specified) Dell Precision Workstation 7910 BIOS (affected versions not specified) Dell Precision Workstation 7920 Rack BIOS (affected versions not specified)

Description The issue is related to an Improper SMM communication buffer verification, which could be exploited by a Local High Privileged attacker. This exploitation could lead to arbitrary writes or denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2022-22558

Affected Products

Dell Poweredge Server Bios

Dell Precision Workstation 7910 Bios

Dell Precision 7920 Rack Workstation Bios

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-22558 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22558 · Vendor Advisory
• https://dell.com/support/kbdoc/000197971 · Vendor Advisory