CVE-2022-22567 MEDIUM

CVE-2022-22567

Vendor Dell

Product CPG BIOS

Weakness CWE-345

Published February 9, 2022

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

4.7/10

Attack vector Local

Attack complexity High

Privileges required High

User interaction None

Confidentiality None

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L

What the vulnerability does

01Description

Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware.

Key dates

02Disclosure timeline

February 9, 2022 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-22567 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/345.html

Related vulnerabilities

04Related CVE

CVE-2024-23922 Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability CVE-2025-5832 Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability CVE-2024-53259 quic-go affected by an ICMP Packet Too Large Injection Attack on Linux CVE-2026-41577 authentik: SAML source does not validate Conditions, timing, or audience on assertions CVE-2020-3220 Cisco IOS XE Software IPsec VPN Denial of Service Vulnerability