8.1
Élevée
CVE-2022-34383 Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability
Description
Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability. A local malicious user may potentially exploit this vulnerability by using an SMI to bypass PMC mitigation and gain arbitrary code execution during SMM.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Edge Gateway 5200 1.03 | premières → < 1.03.10 | 1.03.10 |