Skip to content
OpenAdvisories
High · 8.1 CVE-2022-34383 EUVD-2022-37338GHSA-qx9p-wm6x-9cmf

Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability. A local malicious user ma…

Published Aug 31, 2022 · Updated Sep 16, 2024 · Assigned by dell

Description

Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability. A local malicious user may potentially exploit this vulnerability by using an SMI to bypass PMC mitigation and gain arbitrary code execution during SMM.

Affected products

VendorProductAffectedFixed
Dell Edge Gateway 5200 unspecified – < 1.03.10 1.03.10

References