VULNERABILITY INTELLIGENCE
CVE-2022-22566
CVSS score6.9 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2022-02-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Description
Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device.
Weakness classification
- security_alert@emc.com: CWE-1190
- nvd@nist.gov: NVD-CWE-Other
Primary references
- security_alert@emc.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory