{"id":"CVE-2022-46752","aliases":["EUVD-2022-49535","GHSA-r439-3273-rjvq"],"status":"published","title":"Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker...","description":"Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.","severity":{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00287,"percentile":0.2141,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-285"],"published":"2023-03-08T16:51:55Z","modified":"2026-06-17T05:12:19Z","products":[{"vendor":"dell","product":"cpg bios"},{"vendor":"dell","product":"inspiron_14_plus_7420_firmware"},{"vendor":"dell","product":"inspiron_14_plus_7620_firmware"},{"vendor":"dell","product":"inspiron_3511_firmware"},{"vendor":"dell","product":"inspiron_3520_firmware"},{"vendor":"dell","product":"inspiron_5310_firmware"},{"vendor":"dell","product":"inspiron_5320_firmware"},{"vendor":"dell","product":"inspiron_5410_firmware"},{"vendor":"dell","product":"inspiron_5420_firmware"},{"vendor":"dell","product":"inspiron_5510_firmware"},{"vendor":"dell","product":"inspiron_5620_firmware"},{"vendor":"dell","product":"inspiron_7420_firmware"},{"vendor":"dell","product":"inspiron_7510_firmware"},{"vendor":"dell","product":"inspiron_7610_firmware"},{"vendor":"dell","product":"inspiron_7620_firmware"},{"vendor":"dell","product":"latitude_3140_firmware"},{"vendor":"dell","product":"latitude_3320_firmware"},{"vendor":"dell","product":"latitude_3330_firmware"},{"vendor":"dell","product":"latitude_3420_firmware"},{"vendor":"dell","product":"latitude_3430_firmware"},{"vendor":"dell","product":"latitude_3520_firmware"},{"vendor":"dell","product":"latitude_3530_firmware"},{"vendor":"dell","product":"latitude_5330_firmware"},{"vendor":"dell","product":"latitude_5420_firmware"},{"vendor":"dell","product":"latitude_5421_firmware"},{"vendor":"dell","product":"latitude_5430_firmware"},{"vendor":"dell","product":"latitude_5430_rugged_firmware"},{"vendor":"dell","product":"latitude_5431_firmware"},{"vendor":"dell","product":"latitude_5520_firmware"},{"vendor":"dell","product":"latitude_5521_firmware"},{"vendor":"dell","product":"latitude_5530_firmware"},{"vendor":"dell","product":"latitude_5531_firmware"},{"vendor":"dell","product":"latitude_7320_detachable_firmware"},{"vendor":"dell","product":"latitude_7320_firmware"},{"vendor":"dell","product":"latitude_7330_firmware"},{"vendor":"dell","product":"latitude_7420_firmware"},{"vendor":"dell","product":"latitude_7430_firmware"},{"vendor":"dell","product":"latitude_7520_firmware"},{"vendor":"dell","product":"latitude_7530_firmware"},{"vendor":"dell","product":"latitude_9330_firmware"},{"vendor":"dell","product":"latitude_9420_firmware"},{"vendor":"dell","product":"latitude_9430_firmware"},{"vendor":"dell","product":"latitude_9510_firmware"},{"vendor":"dell","product":"latitude_9520_firmware"},{"vendor":"dell","product":"latitude_rugged_7330_firmware"},{"vendor":"dell","product":"precision_3470_firmware"},{"vendor":"dell","product":"precision_3560_firmware"},{"vendor":"dell","product":"precision_3561_firmware"},{"vendor":"dell","product":"precision_3570_firmware"},{"vendor":"dell","product":"precision_3571_firmware"},{"vendor":"dell","product":"precision_5470_firmware"},{"vendor":"dell","product":"precision_5560_firmware"},{"vendor":"dell","product":"precision_5570_firmware"},{"vendor":"dell","product":"precision_5760_firmware"},{"vendor":"dell","product":"precision_5770_firmware"},{"vendor":"dell","product":"precision_7560_firmware"},{"vendor":"dell","product":"precision_7670_firmware"},{"vendor":"dell","product":"precision_7760_firmware"},{"vendor":"dell","product":"precision_7770_firmware"},{"vendor":"dell","product":"vostro_3420_firmware"},{"vendor":"dell","product":"vostro_3510_firmware"},{"vendor":"dell","product":"vostro_3520_firmware"},{"vendor":"dell","product":"vostro_5310_firmware"},{"vendor":"dell","product":"vostro_5320_firmware"},{"vendor":"dell","product":"vostro_5410_firmware"},{"vendor":"dell","product":"vostro_5510_firmware"},{"vendor":"dell","product":"vostro_5620_firmware"},{"vendor":"dell","product":"vostro_7510_firmware"},{"vendor":"dell","product":"vostro_7620_firmware"},{"vendor":"dell","product":"xps_13_9315_2-in-1_firmware"},{"vendor":"dell","product":"xps_13_9315_firmware"},{"vendor":"dell","product":"xps_13_9320_firmware"},{"vendor":"dell","product":"xps_15_9510_firmware"},{"vendor":"dell","product":"xps_15_9520_firmware"},{"vendor":"dell","product":"xps_17_9710_firmware"},{"vendor":"dell","product":"xps_17_9720_firmware"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000207928/dsa-2023-011-dell-client-platform-security-update-for-a-bios-vulnerability","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46752"},{"url":"https://github.com/advisories/GHSA-r439-3273-rjvq"}],"sources":{"cve":[{"id":"CVE-2022-46752","description":"\nDell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.\n\n","status":"published","published":"2023-03-08T16:51:55.033Z","modified":"2025-02-28T18:32:37.203Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T14:34:31.840191Z"}],"euvd":[{"id":"EUVD-2022-49535","description":"\nDell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.\n\n","status":"published","published":"2023-03-08T16:51:55Z","modified":"2025-02-28T18:32:37Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:53:19.492993Z"}],"ghsa":[{"id":"GHSA-r439-3273-rjvq","title":"Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker...","description":"Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.","status":"published","published":"2023-03-08T18:30:26Z","modified":"2023-03-23T05:05:14Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:54:23.065737Z"}],"nvd":[{"id":"CVE-2022-46752","description":"\nDell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.\n\n","status":"published","published":"2023-03-08T17:15:10.46Z","modified":"2026-06-17T05:12:19.8Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T14:07:36.601381Z"}]}}