PT-2022-18110 · Dell · Dell Bios

Published 2022-09-06 · Updated 2022-09-13 · CVE-2022-26860

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell BIOS (affected versions not specified)

Description The issue is a stack-based buffer overflow vulnerability. A local attacker could exploit this by sending malicious input via SMI to bypass security checks, resulting in arbitrary code execution in SMM.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2022-26860

Affected Products

Dell Bios

References · 4

• https://dell.com/support/kbdoc/000202194 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-26860 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26860 · Security Note
• https://t.me/cibsecurity/49386 · Telegram Post