VULNERABILITY INTELLIGENCE

CVE-2022-26865

CVSS score6.8 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2022-05-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in order to run arbitrary code on the system as Administrator.

Weakness classification

  • security_alert@emc.com: CWE-288
  • nvd@nist.gov: CWE-287

Primary references