What is CVE-2022-29083?

CVE-2022-29083 is a medium-severity vulnerability in Dell Chengming_3980, classified under Improper Authentication. CVSS score: 6.8/10. Published 2022-08-09.

How severe is CVE-2022-29083?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Auth bypass in Dell Chengming_3980

CVE-2022-29083

Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability by bypassing drive security mechanisms in order to gain…

Vulnerability class: Broken Authentication

EPSS: 0.004 (27.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dell Chengming_3980
Dell Chengming_3980_firmware
Dell Chengming_3990
Dell Chengming_3990_firmware
Dell Chengming_3991
Dell Chengming_3991_firmware
Dell Cpg Bios — versions unspecified
Dell G3_3579
Dell G3_3579_firmware
Dell G3_3779

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

security_alert@emc.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-29083?: CVE-2022-29083 is a medium-severity vulnerability in Dell Chengming_3980, classified under Improper Authentication. CVSS score: 6.8/10. Published 2022-08-09.
How severe is CVE-2022-29083?: Medium severity. CVSS v3 base score is 6.8 out of 10.