CVE-2022-22567

Severity: medium (CVSS 5.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-02-09 · updated 2026-06-17
Weakness: CWE-345

Description

Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware.

Affected products

Dell Alienware Area 51M R1 Firmware: before 1.16.0 — fixed in 1.16.0
Dell Alienware Area 51M R2 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Alienware M15 R3 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Alienware M15 R4 Firmware: before 1.6.2 — fixed in 1.6.2
Dell Alienware M15 R6 Firmware: before 1.6.0; from 1.6.0 (excl.) before 1.8.0 — fixed in 1.6.0, 1.8.0
Dell Alienware M17 R3 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Alienware M17 R4 Firmware: before 1.6.2 — fixed in 1.6.2
Dell Chengming 3990 Firmware: before 1.6.0 — fixed in 1.6.0
Dell Chengming 3991 Firmware: before 1.6.0 — fixed in 1.6.0
Dell G15 5510 Firmware: before 1.8.0 — fixed in 1.8.0
Dell G15 5511 Firmware: before 1.9.0 — fixed in 1.9.0
Dell G3 3500 Firmware: before 1.12.0 — fixed in 1.12.0
Dell G3 3590 Firmware: before 1.14.0 — fixed in 1.14.0
Dell G5 5000 Firmware: before 1.4.0 — fixed in 1.4.0
Dell G5 5500 Firmware: before 1.12.0 — fixed in 1.12.0
Dell G7 7500 Firmware: before 1.11.1 — fixed in 1.11.1
Dell G7 7700 Firmware: before 1.11.1 — fixed in 1.11.1
Dell Inspiron 14 5410 Firmware: before 2.6.1 — fixed in 2.6.1
Dell Inspiron 14 5418 Firmware: before 2.6.1 — fixed in 2.6.1
Dell Inspiron 15 5510 Firmware: before 2.6.1 — fixed in 2.6.1
Dell Inspiron 15 5518 Firmware: before 2.6.1 — fixed in 2.6.1
Dell Inspiron 3490 Firmware: before 1.15.0 — fixed in 1.15.0
Dell Inspiron 3493 Firmware: before 1.18.0 — fixed in 1.18.0
Dell Inspiron 3501 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Inspiron 3511 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Inspiron 3590 Firmware: before 1.15.0 — fixed in 1.15.0
Dell Inspiron 3593 Firmware: before 1.18.0 — fixed in 1.18.0
Dell Inspiron 3790 Firmware: before 1.15.0 — fixed in 1.15.0
Dell Inspiron 3793 Firmware: before 1.18.0 — fixed in 1.18.0
Dell Inspiron 3880 Firmware: before 1.6.0 — fixed in 1.6.0

How to fix

Upgrade to a fixed version: Dell Alienware Area 51M R1 Firmware 1.16.0; Dell Alienware Area 51M R2 Firmware 1.11.0; Dell Alienware M15 R3 Firmware 1.12.0; Dell Alienware M15 R4 Firmware 1.6.2; Dell Alienware M15 R6 Firmware 1.6.0, 1.8.0; Dell Alienware M17 R3 Firmware 1.12.0; Dell Alienware M17 R4 Firmware 1.6.2; Dell Chengming 3990 Firmware 1.6.0; Dell Chengming 3991 Firmware 1.6.0; Dell G15 5510 Firmware 1.8.0; Dell G15 5511 Firmware 1.9.0; Dell G3 3500 Firmware 1.12.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-22567 or the next vulnerability affects your stack