CVE-2022-29083

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-08-09 · updated 2026-06-17
Weakness: CWE-287

Description

Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability by bypassing drive security mechanisms in order to gain access to the system.

Affected products

Dell Chengming 3980 Firmware: before 2.23.0 — fixed in 2.23.0
Dell Chengming 3990 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Chengming 3991 Firmware: before 1.11.0 — fixed in 1.11.0
Dell G3 3579 Firmware: before 1.21.0 — fixed in 1.21.0
Dell G3 3779 Firmware: before 1.21.0 — fixed in 1.21.0
Dell G5 5000 Firmware: before 1.7.0 — fixed in 1.7.0
Dell G5 5090 Firmware: before 1.14.0 — fixed in 1.14.0
Dell G5 5587 Firmware: before 1.21.0 — fixed in 1.21.0
Dell G7 7588 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Inspiron 3470 Firmware: before 2.23.0 — fixed in 2.23.0
Dell Inspiron 3480 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 3493 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 3501 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Inspiron 3580 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 3593 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 3670 Firmware: before 2.23.0 — fixed in 2.23.0
Dell Inspiron 3780 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 3790 Firmware: before 1.16.0 — fixed in 1.16.0
Dell Inspiron 3793 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 3880 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Inspiron 3881 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Inspiron 5310 Firmware: before 2.6.1 — fixed in 2.6.1
Dell Inspiron 5410 Firmware: before 2.6.1 — fixed in 2.6.1
Dell Inspiron 5493 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 5494 Firmware: before 1.16.0 — fixed in 1.16.0
Dell Inspiron 5510 Firmware: before 2.6.1 — fixed in 2.6.1
Dell Inspiron 5593 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 5594 Firmware: before 1.16.0 — fixed in 1.16.0
Dell Inspiron 7490 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Inspiron 7510 Firmware: before 1.4.0 — fixed in 1.4.0

How to fix

Upgrade to a fixed version: Dell Chengming 3980 Firmware 2.23.0; Dell Chengming 3990 Firmware 1.11.0; Dell Chengming 3991 Firmware 1.11.0; Dell G3 3579 Firmware 1.21.0; Dell G3 3779 Firmware 1.21.0; Dell G5 5000 Firmware 1.7.0; Dell G5 5090 Firmware 1.14.0; Dell G5 5587 Firmware 1.21.0; Dell G7 7588 Firmware 1.21.0; Dell Inspiron 3470 Firmware 2.23.0; Dell Inspiron 3480 Firmware 1.19.0; Dell Inspiron 3493 Firmware 1.19.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-29083 or the next vulnerability affects your stack