What is the CVSS score of CVE-2022-22558?

CVE-2022-22558 has a CVSS 3.1 base score of 6.0 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H. EPSS exploitation probability: 0.2%.

R6415 Firmware CVE-2022-22558

MEDIUM

Buffer Overflow (CWE-119)

2022-04-21 security_alert@emc.com

Denial Of Service Dell Buffer Overflow R6415 Firmware R7415 Firmware R7425 Firmware R730 Firmware R730Xd Firmware R630 Firmware C4130 Firmware M630 Firmware M630P Firmware Fc630 Firmware Fc430 Firmware M830 Firmware M830P Firmware Fc830 Firmware T630 Firmware R530 Firmware R430 Firmware T430 Firmware R830 Firmware C6320 Firmware

6.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.0 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Apr 21, 2022 - 21:15 nvd

MEDIUM 6.0

DescriptionNVD

Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service.

AnalysisAI

Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. Rated medium severity (CVSS 6.0), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service. Affected products include: Dell R6415 Firmware, Dell R7415 Firmware, Dell R7425 Firmware, Dell R730 Firmware, Dell R730Xd Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.