CVE-2022-46752

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-285

Affected software

No affected versions have been published.

Timeline

Published
Mar 8, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-467546.5Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user might access certCVE-2022-467554.9Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general CVE-2022-467566.7Dell VxRail, versions prior to 7.0.410, contain a Container Escape Vulnerability. A local high-privileged attacker could potentially exploitCVE-2022-46765.4The OSM WordPress plugin through 6.01 does not validate and escape some of its shortcode attributes, which could allow users with a role as CVE-2022-467617.5The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may caCVE-2022-467627.5The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.CVE-2022-467638.8A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database uCVE-2022-467649.8A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to executCVE-2022-467685.9Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not haveCVE-2022-467695.4An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.CVE-2022-46775.4The Leaflet Maps Marker WordPress plugin before 3.12.7 does not validate and escape one of its shortcode attributes, which could allow usersCVE-2022-467707.5qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumpt
CVE-2022-46752: Medium severity, CVSS 4.6 | Vulnix