PT-2022-1735 · Dell · Dell Client Consumer+1

Published 2022-02-07 · Updated 2022-02-16 · CVE-2022-22566

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell Client Commercial and Consumer platforms (affected versions not specified)

Description The issue is related to a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability to execute arbitrary code on the device. The vulnerability is also described as a buffer overflow in the BIOS firmware of Dell laptops, which could allow an attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-1190

CWE-119

Related Identifiers

BDU:2022-01001

CVE-2022-22566

Affected Products

Dell Client Commercial

Dell Client Consumer

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-22566 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22566 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-01001 · Security Note
• https://dell.com/support/kbdoc/en-us/000195905/dsa-2022-028 · Vendor Advisory
• https://t.me/cibsecurity/37112 · Telegram Post
• https://dell.com/support/kbdoc/ru-ru/000195905/dsa-2022-028 · Note
• https://t.me/cvenotify/26537 · Telegram Post