CVE-2022-34383

State: Published
Severity: 8.1 High
Published: Aug 31, 2022
Updated: Sep 16, 2024
Reserved: Jun 23, 2022

Description

Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability. A local malicious user may potentially exploit this vulnerability by using an SMI to bypass PMC mitigation and gain arbitrary code execution during SMM.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L	dell

Weaknesses

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

Affected Products

Product	Versions
Edge Gateway 5200Dell	before 1.03.10Affected

References

https://www.dell.com/support/kbdoc/en-us/000202711

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.