CVE-2022-34400

EPSS 0.05%
Veröffentlicht 01.02.2023 05:15:12
Zuletzt bearbeitet 21.11.2024 07:09:26
Quelle security_alert@emc.com
Teams Watchlist Login
Unerledigt Login

Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM during SMM.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Dell ≫ Alienware M15 R6 Firmware Version < 1.17.0

Dell ≫ Alienware M15 R6 Version-

Dell ≫ Alienware M15 R7 Firmware Version < 1.4.3

Dell ≫ Alienware M15 R7 Version-

Dell ≫ Alienware M15 Ryzen Edition R5 Firmware Version < 1.8.0

Dell ≫ Alienware M15 Ryzen Edition R5 Version-

Dell ≫ Alienware M17 R5 Amd Firmware Version < 1.4.3

Dell ≫ Alienware M17 R5 Amd Version-

Dell ≫ G15 5510 Firmware Version < 1.16.0

Dell ≫ G15 5510 Version-

Dell ≫ G15 5511 Firmware Version < 1.18.0

Dell ≫ G15 5511 Version-

Dell ≫ G15 5515 Firmware Version < 1.8.0

Dell ≫ G15 5515 Version-

Dell ≫ G15 5525 Firmware Version < 1.4.3

Dell ≫ G15 5525 Version-

Dell ≫ G5 Se 5505 Firmware Version < 1.13.0

Dell ≫ G5 Se 5505 Version-

Dell ≫ Inspiron 14 5410 2-in-1 Firmware Version < 2.15.2

Dell ≫ Inspiron 14 5410 2-in-1 Version-

Dell ≫ Inspiron 15 3511 Firmware Version < 1.18.2

Dell ≫ Inspiron 15 3511 Version-

Dell ≫ Inspiron 3195 2-in-1 Firmware Version < 1.6.0

Dell ≫ Inspiron 3195 2-in-1 Version-

Dell ≫ Inspiron 3275 Firmware Version < 1.9.2

Dell ≫ Inspiron 3275 Version-

Dell ≫ Inspiron 3475 Firmware Version < 1.9.2

Dell ≫ Inspiron 3475 Version-

Dell ≫ Inspiron 3505 Firmware Version < 1.9.0

Dell ≫ Inspiron 3505 Version-

Dell ≫ Inspiron 3515 Firmware Version < 1.9.0

Dell ≫ Inspiron 3515 Version-

Dell ≫ Inspiron 3525 Firmware Version < 1.5.0

Dell ≫ Inspiron 3525 Version-

Dell ≫ Inspiron 3585 Firmware Version < 1.10.0

Dell ≫ Inspiron 3585 Version-

Dell ≫ Inspiron 3595 Firmware Version < 1.5.0

Dell ≫ Inspiron 3595 Version-

Dell ≫ Inspiron 3785 Firmware Version < 1.10.0

Dell ≫ Inspiron 3785 Version-

Dell ≫ Inspiron 3891 Firmware Version < 1.12.0

Dell ≫ Inspiron 3891 Version-

Dell ≫ Inspiron 5310 Firmware Version < 2.15.0

Dell ≫ Inspiron 5310 Version-

Dell ≫ Inspiron 5405 Firmware Version < 1.9.0

Dell ≫ Inspiron 5405 Version-

Dell ≫ Inspiron 5410 Firmware Version < 2.14.0

Dell ≫ Inspiron 5410 Version-

Dell ≫ Inspiron 5415 Firmware Version < 1.13.0

Dell ≫ Inspiron 5415 Version-

Dell ≫ Inspiron 5425 Firmware Version < 1.5.0

Dell ≫ Inspiron 5425 Version-

Dell ≫ Inspiron 5485 Firmware Version < 2.11.0

Dell ≫ Inspiron 5485 Version-

Dell ≫ Inspiron 5485 2-in-1 Firmware Version < 2.11.0

Dell ≫ Inspiron 5485 2-in-1 Version-

Dell ≫ Inspiron 5505 Firmware Version < 1.9.0

Dell ≫ Inspiron 5505 Version-

Dell ≫ Inspiron 5510 Firmware Version < 2.15.2

Dell ≫ Inspiron 5510 Version-

Dell ≫ Inspiron 5515 Firmware Version < 1.13.0

Dell ≫ Inspiron 5515 Version-

Dell ≫ Inspiron 5585 Firmware Version < 2.11.0

Dell ≫ Inspiron 5585 Version-

Dell ≫ Inspiron 7405 2-in-1 Firmware Version < 1.10.1

Dell ≫ Inspiron 7405 2-in-1 Version-

Dell ≫ Inspiron 7415 Firmware Version < 1.13.0

Dell ≫ Inspiron 7415 Version-

Dell ≫ Inspiron 7425 Firmware Version < 1.5.0

Dell ≫ Inspiron 7425 Version-

Dell ≫ Inspiron 7510 Firmware Version < 1.12.0

Dell ≫ Inspiron 7510 Version-

Dell ≫ Inspiron 7610 Firmware Version < 1.12.0

Dell ≫ Inspiron 7610 Version-

Dell ≫ Latitude 3320 Firmware Version < 1.18.2

Dell ≫ Latitude 3320 Version-

Dell ≫ Latitude 3420 Firmware Version < 1.23.2

Dell ≫ Latitude 3420 Version-

Dell ≫ Latitude 3520 Firmware Version < 1.23.2

Dell ≫ Latitude 3520 Version-

Dell ≫ Latitude 5320 Firmware Version < 1.24.3

Dell ≫ Latitude 5320 Version-

Dell ≫ Latitude 5420 Firmware Version < 1.22.0

Dell ≫ Latitude 5420 Version-

Dell ≫ Latitude 5520 Firmware Version < 1.24.3

Dell ≫ Latitude 5520 Version-

Dell ≫ Latitude 5521 Firmware Version < 1.17.3

Dell ≫ Latitude 5521 Version-

Dell ≫ Latitude 7320 Firmware Version < 1.20.0

Dell ≫ Latitude 7320 Version-

Dell ≫ Latitude 7320 Detachable Firmware Version < 1.17.2

Dell ≫ Latitude 7320 Detachable Version-

Dell ≫ Latitude 7420 Firmware Version < 1.20.0

Dell ≫ Latitude 7420 Version-

Dell ≫ Latitude 7520 Firmware Version < 1.20.0

Dell ≫ Latitude 7520 Version-

Dell ≫ Latitude 9420 Firmware Version < 1.16.2

Dell ≫ Latitude 9420 Version-

Dell ≫ Latitude 9520 Firmware Version < 1.17.0

Dell ≫ Latitude 9520 Version-

Dell ≫ Latitude Rugged 5430 Firmware Version < 1.12.0

Dell ≫ Latitude Rugged 5430 Version-

Dell ≫ Latitude Rugged 7330 Firmware Version < 1.12.0

Dell ≫ Latitude Rugged 7330 Version-

Dell ≫ Latitude 5421 Firmware Version < 1.15.0

Dell ≫ Latitude 5421 Version-

Dell ≫ Optiplex 5090 Firmware Version < 1.12.0

Dell ≫ Optiplex 5090 Version-

Dell ≫ Optiplex 5490 All-in-one Firmware Version < 1.15.0

Dell ≫ Optiplex 5490 All-in-one Version-

Dell ≫ Optiplex 7090 Tower Firmware Version < 1.12.0

Dell ≫ Optiplex 7090 Tower Version-

Dell ≫ Optiplex 7090 Ultra Firmware Version < 1.15.0

Dell ≫ Optiplex 7090 Ultra Version-

Dell ≫ Optiplex 7090 Aio Firmware Version < 1.15.0

Dell ≫ Optiplex 7090 Aio Version-

Dell ≫ Precision 3450 Firmware Version < 1.12.0

Dell ≫ Precision 3450 Version-

Dell ≫ Precision 3560 Firmware Version < 1.24.3

Dell ≫ Precision 3560 Version-

Dell ≫ Precision 3561 Firmware Version < 1.17.3

Dell ≫ Precision 3561 Version-

Dell ≫ Precision 3650 Tower Firmware Version < 1.16.0

Dell ≫ Precision 3650 Tower Version-

Dell ≫ Precision 5560 Firmware Version < 1.15.2

Dell ≫ Precision 5560 Version-

Dell ≫ Precision 5760 Firmware Version < 1.15.2

Dell ≫ Precision 5760 Version-

Dell ≫ Precision 7560 Firmware Version < 1.16.0

Dell ≫ Precision 7560 Version-

Dell ≫ Precision 7760 Firmware Version < 1.16.0

Dell ≫ Precision 7760 Version-

Dell ≫ Vostro 3405 Firmware Version < 1.9.0

Dell ≫ Vostro 3405 Version-

Dell ≫ Vostro 3425 Firmware Version < 1.5.0

Dell ≫ Vostro 3425 Version-

Dell ≫ Vostro 3510 Firmware Version < 1.18.2

Dell ≫ Vostro 3510 Version-

Dell ≫ Vostro 3515 Firmware Version < 1.9.0

Dell ≫ Vostro 3515 Version-

Dell ≫ Vostro 3525 Firmware Version < 1.5.0

Dell ≫ Vostro 3525 Version-

Dell ≫ Vostro 3690 Firmware Version < 1.12.0

Dell ≫ Vostro 3690 Version-

Dell ≫ Vostro 3890 Firmware Version < 1.12.0

Dell ≫ Vostro 3890 Version-

Dell ≫ Vostro 5310 Firmware Version < 2.15.0

Dell ≫ Vostro 5310 Version-

Dell ≫ Vostro 5410 Firmware Version < 2.15.2

Dell ≫ Vostro 5410 Version-

Dell ≫ Vostro 5415 Firmware Version < 1.13.0

Dell ≫ Vostro 5415 Version-

Dell ≫ Vostro 5510 Firmware Version < 2.15.2

Dell ≫ Vostro 5510 Version-

Dell ≫ Vostro 5515 Firmware Version < 1.13.0

Dell ≫ Vostro 5515 Version-

Dell ≫ Vostro 5625 Firmware Version < 1.5.0

Dell ≫ Vostro 5625 Version-

Dell ≫ Vostro 5890 Firmware Version < 1.12.0

Dell ≫ Vostro 5890 Version-

Dell ≫ Vostro 7510 Firmware Version < 1.12.0

Dell ≫ Vostro 7510 Version-

Dell ≫ Xps 15 9510 Firmware Version < 1.15.2

Dell ≫ Xps 15 9510 Version-

Dell ≫ Xps 17 9710 Firmware Version < 1.15.2

Dell ≫ Xps 17 9710 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.05%	0.111

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.1	1.8	5.2	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
security_alert@emc.com	7.1	1.8	5.2	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.dell.com/support/kbdoc/en-us/000205716/dsa-2022-327

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-34400

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-34400

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-34400

EUVD