CVE-2022-46752

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-285

Affected software

Vendor	Product	Versions
Dell	CPG BIOS	1.8.0; 1.19.0; 1.9.0; 2.17.0; 1.7.0; 2.16.0; 2.16.1; 1.10.0; 1.18.0; 1.14.0; 1.2.0; 1.25.1; 1.24.0; 1.8.3; 1.8.1; 1.8.2; 1.22.0; 1.17.0; 1.9.1; 1.17.1

References

Timeline

Published: Mar 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-467546.5Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user might access cert CVE-2022-467554.9Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general CVE-2022-467566.7Dell VxRail, versions prior to 7.0.410, contain a Container Escape Vulnerability. A local high-privileged attacker could potentially exploit CVE-2022-46765.4The OSM WordPress plugin through 6.01 does not validate and escape some of its shortcode attributes, which could allow users with a role as CVE-2022-467617.5The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may ca CVE-2022-467627.5The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.CVE-2022-467638.8A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database u CVE-2022-467649.8A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to execut CVE-2022-467685.9Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have CVE-2022-467695.4An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.CVE-2022-46775.4The Leaflet Maps Marker WordPress plugin before 3.12.7 does not validate and escape one of its shortcode attributes, which could allow users CVE-2022-467707.5qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumpt