CVE-2022-22567mediumCWE-345

CVE-2022-22567: medium-severity vulnerability in Dell CPG BIOS

Published · Updated

Follow this CVE+ Monitor CPG BIOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.7epss 0.1%
Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L
Affected products
Dell · CPG BIOS
Related CVEs — Dell CPG BIOS

In the same product, most dangerous first.

CVE-2023-48674MEDIUMCVE-2023-48674EPSS 0.5%CVE-2020-5379MEDIUMCVE-2020-5379EPSS 0.4%CVE-2020-5378MEDIUMCVE-2020-5378EPSS 0.4%CVE-2020-5376MEDIUMCVE-2020-5376EPSS 0.4%CVE-2020-5361MEDIUMCVE-2020-5361EPSS 0.4%CVE-2020-26186MEDIUMCVE-2020-26186EPSS 0.4%