CVE-2022-22567

Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient...

4.7 Medium

Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: High
Privileges needed: High
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: High
Availability: Low

Exploit likelihood

0.14%Down 0.7 points since Feb 10, 2022

What each source reports

CVE List Score used 4.7

Record: CVE-2022-22567
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L
Weakness: CWE-345
Updated: 2026-11-02

EUVDEUVD-2022-27713 4.7

Record: EUVD-2022-27713
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rmxf-c923-96h6 No score

Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient...

Record: GHSA-rmxf-c923-96h6
Weakness: CWE-345
Updated: 2026-11-02

NVD 4.7

Record: CVE-2022-22567
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L
CVSS 3.1: 5.1 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L
CVSS 2.0: 3.6 LowAV:L/AC:L/Au:N/C:N/I:P/A:P
Weakness: CWE-345
Updated: 2026-11-02

Affected products

Show 203 moreShow less

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases, published	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-22567 is a medium vulnerability (CVSS 4.7) in Dell Alienware Area 51m R1 Firmware, published February 9, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. No source names a fixed version.