Medium severity · published May 26, 2022
CVE-2022-26865
Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability
6.8
CVSS
0.3%
EPSS
No
On KEV
Description
Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in order to run arbitrary code on the system as Administrator.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Dell OS Recovery Tool · Dell
before 5.5.2 · source: vendor
SO
Supportassist OS Recovery · Dell
5.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-26865
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-26865
Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000198780/dsa-2022-102
More from Dell OS Recovery Tool
7.8
CVE-2023-39253
Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability
7.8
CVE-2023-39259
Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability
7.8
CVE-2023-28066
Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability