CVE-2022-46752 MEDIUM

CVE-2022-46752

Vendor Dell
Product CPG BIOS
Weakness CWE-285
Published March 8, 2023
Last update February 28, 2025
View on NVD All CVEs

CVSS base score

4.6/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.

Key dates

02Disclosure timeline

March 8, 2023 CVE published
February 28, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-4868 Improper Authorization in froxlor/froxlor CVE-2025-10988 YunaiV ruoyi-vue-pro transfer improper authorization CVE-2023-22938 Permissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise CVE-2025-10084 elunez eladmin SysLogController 1 queryErrorLogDetail improper authorization CVE-2024-1803 EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.12 - Insufficient Authorization Checks to Block Usual