Vulnerability Details CVE-2022-34383
Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability. A local malicious user may potentially exploit this vulnerability by using an SMI to bypass PMC mitigation and gain arbitrary code execution during SMM.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 13.4%
CVSS Severity
CVSS v3 Score 8.1
References
Products affected by CVE-2022-34383
-
cpe:2.3:h:dell:edge_gateway_5200:-
-
cpe:2.3:o:dell:edge_gateway_5200_firmware:-