Approved changes feed: RSS · Atom

cpe:2.3:o:dell:optiplex_5490_aio_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductOptiplex 5490 Aio Firmware (edf3f334-c5fc-50c9-a25b-c741d8c3d82c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-26861 vulnerable 2026-06-08 05:41:54.034867 Details available
HIGH (7.9)
Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.
Published: 2022-09-06T20:15:20.148Z
Updated: 2026-05-27T13:03:13.475Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26860 vulnerable 2026-06-08 05:41:54.006203 Details available
HIGH (7.5)
Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM.
Published: 2022-09-06T20:15:19.312Z
Updated: 2026-05-27T13:02:18.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26859 vulnerable 2026-06-08 05:41:53.978170 Details available
MEDIUM (6.1)
Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM.
Published: 2022-09-06T20:15:18.435Z
Updated: 2026-05-27T13:02:46.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26858 vulnerable 2026-06-08 05:41:53.780190 Details available
MEDIUM (6.1)
Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls.
Published: 2022-09-06T20:15:17.414Z
Updated: 2026-05-27T12:57:23.397Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22567 vulnerable 2026-06-08 05:40:54.643551 Details available
MEDIUM (4.7)
Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware.
Published: 2022-02-09T20:00:16.918Z
Updated: 2024-09-16T20:51:53.564Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22566 vulnerable 2026-06-08 05:40:54.524574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36343 vulnerable 2026-06-08 05:32:51.962489 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36342 vulnerable 2026-06-08 05:32:51.782472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21574 vulnerable 2026-06-08 05:29:12.902291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21573 vulnerable 2026-06-08 05:29:12.893889 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21572 vulnerable 2026-06-08 05:29:12.885875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21571 vulnerable 2026-06-08 05:29:12.823192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.