7.1

CVE-2022-34400

Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM during SMM.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Alienware M15 R6 Firmware Version < 1.17.0
   Dell ≫ Alienware M15 R6 Version -
Dell ≫ Alienware M15 R7 Firmware Version < 1.4.3
   Dell ≫ Alienware M15 R7 Version -
Dell ≫ Alienware M17 R5 Amd Firmware Version < 1.4.3
   Dell ≫ Alienware M17 R5 Amd Version -
Dell ≫ G15 5510 Firmware Version < 1.16.0
   Dell ≫ G15 5510 Version -
Dell ≫ G15 5511 Firmware Version < 1.18.0
   Dell ≫ G15 5511 Version -
Dell ≫ G15 5515 Firmware Version < 1.8.0
   Dell ≫ G15 5515 Version -
Dell ≫ G15 5525 Firmware Version < 1.4.3
   Dell ≫ G15 5525 Version -
Dell ≫ G5 Se 5505 Firmware Version < 1.13.0
   Dell ≫ G5 Se 5505 Version -
Dell ≫ Inspiron 14 5410 2-in-1 Firmware Version < 2.15.2
   Dell ≫ Inspiron 14 5410 2-in-1 Version -
Dell ≫ Inspiron 15 3511 Firmware Version < 1.18.2
   Dell ≫ Inspiron 15 3511 Version -
Dell ≫ Inspiron 3195 2-in-1 Firmware Version < 1.6.0
   Dell ≫ Inspiron 3195 2-in-1 Version -
Dell ≫ Inspiron 3275 Firmware Version < 1.9.2
   Dell ≫ Inspiron 3275 Version -
Dell ≫ Inspiron 3475 Firmware Version < 1.9.2
   Dell ≫ Inspiron 3475 Version -
Dell ≫ Inspiron 3505 Firmware Version < 1.9.0
   Dell ≫ Inspiron 3505 Version -
Dell ≫ Inspiron 3515 Firmware Version < 1.9.0
   Dell ≫ Inspiron 3515 Version -
Dell ≫ Inspiron 3525 Firmware Version < 1.5.0
   Dell ≫ Inspiron 3525 Version -
Dell ≫ Inspiron 3585 Firmware Version < 1.10.0
   Dell ≫ Inspiron 3585 Version -
Dell ≫ Inspiron 3595 Firmware Version < 1.5.0
   Dell ≫ Inspiron 3595 Version -
Dell ≫ Inspiron 3785 Firmware Version < 1.10.0
   Dell ≫ Inspiron 3785 Version -
Dell ≫ Inspiron 3891 Firmware Version < 1.12.0
   Dell ≫ Inspiron 3891 Version -
Dell ≫ Inspiron 5310 Firmware Version < 2.15.0
   Dell ≫ Inspiron 5310 Version -
Dell ≫ Inspiron 5405 Firmware Version < 1.9.0
   Dell ≫ Inspiron 5405 Version -
Dell ≫ Inspiron 5410 Firmware Version < 2.14.0
   Dell ≫ Inspiron 5410 Version -
Dell ≫ Inspiron 5415 Firmware Version < 1.13.0
   Dell ≫ Inspiron 5415 Version -
Dell ≫ Inspiron 5425 Firmware Version < 1.5.0
   Dell ≫ Inspiron 5425 Version -
Dell ≫ Inspiron 5485 Firmware Version < 2.11.0
   Dell ≫ Inspiron 5485 Version -
Dell ≫ Inspiron 5485 2-in-1 Firmware Version < 2.11.0
   Dell ≫ Inspiron 5485 2-in-1 Version -
Dell ≫ Inspiron 5505 Firmware Version < 1.9.0
   Dell ≫ Inspiron 5505 Version -
Dell ≫ Inspiron 5510 Firmware Version < 2.15.2
   Dell ≫ Inspiron 5510 Version -
Dell ≫ Inspiron 5515 Firmware Version < 1.13.0
   Dell ≫ Inspiron 5515 Version -
Dell ≫ Inspiron 5585 Firmware Version < 2.11.0
   Dell ≫ Inspiron 5585 Version -
Dell ≫ Inspiron 7405 2-in-1 Firmware Version < 1.10.1
   Dell ≫ Inspiron 7405 2-in-1 Version -
Dell ≫ Inspiron 7415 Firmware Version < 1.13.0
   Dell ≫ Inspiron 7415 Version -
Dell ≫ Inspiron 7425 Firmware Version < 1.5.0
   Dell ≫ Inspiron 7425 Version -
Dell ≫ Inspiron 7510 Firmware Version < 1.12.0
   Dell ≫ Inspiron 7510 Version -
Dell ≫ Inspiron 7610 Firmware Version < 1.12.0
   Dell ≫ Inspiron 7610 Version -
Dell ≫ Latitude 3320 Firmware Version < 1.18.2
   Dell ≫ Latitude 3320 Version -
Dell ≫ Latitude 3420 Firmware Version < 1.23.2
   Dell ≫ Latitude 3420 Version -
Dell ≫ Latitude 3520 Firmware Version < 1.23.2
   Dell ≫ Latitude 3520 Version -
Dell ≫ Latitude 5320 Firmware Version < 1.24.3
   Dell ≫ Latitude 5320 Version -
Dell ≫ Latitude 5420 Firmware Version < 1.22.0
   Dell ≫ Latitude 5420 Version -
Dell ≫ Latitude 5520 Firmware Version < 1.24.3
   Dell ≫ Latitude 5520 Version -
Dell ≫ Latitude 5521 Firmware Version < 1.17.3
   Dell ≫ Latitude 5521 Version -
Dell ≫ Latitude 7320 Firmware Version < 1.20.0
   Dell ≫ Latitude 7320 Version -
Dell ≫ Latitude 7320 Detachable Firmware Version < 1.17.2
   Dell ≫ Latitude 7320 Detachable Version -
Dell ≫ Latitude 7420 Firmware Version < 1.20.0
   Dell ≫ Latitude 7420 Version -
Dell ≫ Latitude 7520 Firmware Version < 1.20.0
   Dell ≫ Latitude 7520 Version -
Dell ≫ Latitude 9420 Firmware Version < 1.16.2
   Dell ≫ Latitude 9420 Version -
Dell ≫ Latitude 9520 Firmware Version < 1.17.0
   Dell ≫ Latitude 9520 Version -
Dell ≫ Latitude Rugged 5430 Firmware Version < 1.12.0
   Dell ≫ Latitude Rugged 5430 Version -
Dell ≫ Latitude Rugged 7330 Firmware Version < 1.12.0
   Dell ≫ Latitude Rugged 7330 Version -
Dell ≫ Latitude 5421 Firmware Version < 1.15.0
   Dell ≫ Latitude 5421 Version -
Dell ≫ Optiplex 5090 Firmware Version < 1.12.0
   Dell ≫ Optiplex 5090 Version -
Dell ≫ Optiplex 5490 All-in-one Firmware Version < 1.15.0
   Dell ≫ Optiplex 5490 All-in-one Version -
Dell ≫ Optiplex 7090 Tower Firmware Version < 1.12.0
   Dell ≫ Optiplex 7090 Tower Version -
Dell ≫ Optiplex 7090 Ultra Firmware Version < 1.15.0
   Dell ≫ Optiplex 7090 Ultra Version -
Dell ≫ Optiplex 7090 Aio Firmware Version < 1.15.0
   Dell ≫ Optiplex 7090 Aio Version -
Dell ≫ Precision 3450 Firmware Version < 1.12.0
   Dell ≫ Precision 3450 Version -
Dell ≫ Precision 3560 Firmware Version < 1.24.3
   Dell ≫ Precision 3560 Version -
Dell ≫ Precision 3561 Firmware Version < 1.17.3
   Dell ≫ Precision 3561 Version -
Dell ≫ Precision 3650 Tower Firmware Version < 1.16.0
   Dell ≫ Precision 3650 Tower Version -
Dell ≫ Precision 5560 Firmware Version < 1.15.2
   Dell ≫ Precision 5560 Version -
Dell ≫ Precision 5760 Firmware Version < 1.15.2
   Dell ≫ Precision 5760 Version -
Dell ≫ Precision 7560 Firmware Version < 1.16.0
   Dell ≫ Precision 7560 Version -
Dell ≫ Precision 7760 Firmware Version < 1.16.0
   Dell ≫ Precision 7760 Version -
Dell ≫ Vostro 3405 Firmware Version < 1.9.0
   Dell ≫ Vostro 3405 Version -
Dell ≫ Vostro 3425 Firmware Version < 1.5.0
   Dell ≫ Vostro 3425 Version -
Dell ≫ Vostro 3510 Firmware Version < 1.18.2
   Dell ≫ Vostro 3510 Version -
Dell ≫ Vostro 3515 Firmware Version < 1.9.0
   Dell ≫ Vostro 3515 Version -
Dell ≫ Vostro 3525 Firmware Version < 1.5.0
   Dell ≫ Vostro 3525 Version -
Dell ≫ Vostro 3690 Firmware Version < 1.12.0
   Dell ≫ Vostro 3690 Version -
Dell ≫ Vostro 3890 Firmware Version < 1.12.0
   Dell ≫ Vostro 3890 Version -
Dell ≫ Vostro 5310 Firmware Version < 2.15.0
   Dell ≫ Vostro 5310 Version -
Dell ≫ Vostro 5410 Firmware Version < 2.15.2
   Dell ≫ Vostro 5410 Version -
Dell ≫ Vostro 5415 Firmware Version < 1.13.0
   Dell ≫ Vostro 5415 Version -
Dell ≫ Vostro 5510 Firmware Version < 2.15.2
   Dell ≫ Vostro 5510 Version -
Dell ≫ Vostro 5515 Firmware Version < 1.13.0
   Dell ≫ Vostro 5515 Version -
Dell ≫ Vostro 5625 Firmware Version < 1.5.0
   Dell ≫ Vostro 5625 Version -
Dell ≫ Vostro 5890 Firmware Version < 1.12.0
   Dell ≫ Vostro 5890 Version -
Dell ≫ Vostro 7510 Firmware Version < 1.12.0
   Dell ≫ Vostro 7510 Version -
Dell ≫ Xps 15 9510 Firmware Version < 1.15.2
   Dell ≫ Xps 15 9510 Version -
Dell ≫ Xps 17 9710 Firmware Version < 1.15.2
   Dell ≫ Xps 17 9710 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.107
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
EMC 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.dell.com/support/kbdoc/en-us/000205716/dsa-2022-327
Vendor Advisory