CVE-2022-26865: dell supportassist os recovery

csirt@kutim:~/threat-intel/cve/CVE-2022-26865

CVSS 6.8 · Medium EPSS 0,30%

Kerentanan Authentication Bypass Using an Alternate Path or Channel pada dell supportassist os recovery. Skor CVSS 3.1 6.8 (Medium) menurut NVD.

Deskripsi (NVD)

Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in order to run arbitrary code on the system as Administrator.

Rincian

Terbit di NVD: 26 Mei 2022
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 6.8 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-288: Authentication Bypass Using an Alternate Path or Channel
CWE-287: Improper Authentication
EPSS (30 hari): 0,30% peluang dieksploitasi; lebih tinggi dari 20,9% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
dell	supportassist os recovery	Versi 5.5.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.dell.com/support/kbdoc/en-us/000198780/dsa-2022-102 advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.