Skip to content
OpenAdvisories
High · 7.9 CVE-2022-26861 EUVD-2022-31410GHSA-cp2w-v57g-8xxw

Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulner…

Published Sep 6, 2022 · Updated May 27, 2026 · Assigned by dell

Vendor: Dell Product: CPG BIOS

Description

Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.

Affected products

VendorProductAffectedFixed
Dell CPG BIOS unspecified – < Gen7, Gen8, Gen9, Gen10, Gen11, 21Q1-Q4 Gen7, Gen8, Gen9, Gen10, Gen11, 21Q1-Q4

References