6.7

CVE-2022-34412

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ R6515 Firmware Version < 2.9.3
   Dell ≫ R6515 Version -
Dell ≫ R7515 Firmware Version < 2.9.3
   Dell ≫ R7515 Version -
Dell ≫ R6525 Firmware Version < 2.9.3
   Dell ≫ R6525 Version -
Dell ≫ R7525 Firmware Version < 2.9.3
   Dell ≫ R7525 Version -
Dell ≫ Xe8545 Firmware Version < 2.9.4
   Dell ≫ Xe8545 Version -
Dell ≫ C6525 Firmware
   Dell ≫ C6525 Version -
Dell ≫ R6415 Firmware Version < 1.19.0
   Dell ≫ R6415 Version -
Dell ≫ R7415 Firmware Version < 1.19.0
   Dell ≫ R7415 Version -
Dell ≫ R7425 Firmware Version < 1.19.0
   Dell ≫ R7425 Version -
Dell ≫ R750 Firmware Version < 1.8.2
   Dell ≫ R750 Version -
Dell ≫ R750xa Firmware Version < 1.8.2
   Dell ≫ R750xa Version -
Dell ≫ R650 Firmware Version < 1.8.2
   Dell ≫ R650 Version -
Dell ≫ C6520 Firmware Version < 1.8.2
   Dell ≫ C6520 Version -
Dell ≫ Mx750c Firmware Version < 1.8.2
   Dell ≫ Mx750c Version -
Dell ≫ R450 Firmware Version < 1.8.2
   Dell ≫ R450 Version -
Dell ≫ R550 Firmware Version < 1.8.2
   Dell ≫ R550 Version -
Dell ≫ R650xs Firmware Version < 1.8.2
   Dell ≫ R650xs Version -
Dell ≫ R750xs Firmware Version < 1.8.2
   Dell ≫ R750xs Version -
Dell ≫ T550 Firmware Version < 1.8.2
   Dell ≫ T550 Version -
Dell ≫ Xr11 Firmware Version < 1.8.2
   Dell ≫ Xr11 Version -
Dell ≫ Xr12 Firmware Version < 1.8.2
   Dell ≫ Xr12 Version -
Dell ≫ R250 Firmware Version < 1.4.2
   Dell ≫ R250 Version -
Dell ≫ R350 Firmware Version < 1.4.2
   Dell ≫ R350 Version -
Dell ≫ T150 Firmware Version < 1.4.2
   Dell ≫ T150 Version -
Dell ≫ T350 Firmware Version < 1.4.2
   Dell ≫ T350 Version -
Dell ≫ R740 Firmware Version < 2.16.1
   Dell ≫ R740 Version -
Dell ≫ R740xd Firmware Version < 2.16.1
   Dell ≫ R740xd Version -
Dell ≫ R640 Firmware Version < 2.16.1
   Dell ≫ R640 Version -
Dell ≫ R940 Firmware Version < 2.16.1
   Dell ≫ R940 Version -
Dell ≫ R540 Firmware Version < 2.16.1
   Dell ≫ R540 Version -
Dell ≫ R440 Firmware Version < 2.16.1
   Dell ≫ R440 Version -
Dell ≫ T440 Firmware Version < 2.16.1
   Dell ≫ T440 Version -
Dell ≫ Xr2 Firmware Version < 2.16.1
   Dell ≫ Xr2 Version -
Dell ≫ R740xd2 Firmware Version < 2.16.1
   Dell ≫ R740xd2 Version -
Dell ≫ R840 Firmware Version < 2.16.1
   Dell ≫ R840 Version -
Dell ≫ R940xa Firmware Version < 2.16.1
   Dell ≫ R940xa Version -
Dell ≫ T640 Firmware Version < 2.16.1
   Dell ≫ T640 Version -
Dell ≫ C6420 Firmware Version < 2.16.1
   Dell ≫ C6420 Version -
Dell ≫ Fc640 Firmware Version < 2.16.1
   Dell ≫ Fc640 Version -
Dell ≫ M640 Firmware Version < 2.16.1
   Dell ≫ M640 Version -
Dell ≫ M640p Firmware Version < 2.16.1
   Dell ≫ M640p Version -
Dell ≫ Mx740c Firmware Version < 2.16.1
   Dell ≫ Mx740c Version -
Dell ≫ Mx840c Firmware Version < 2.16.1
   Dell ≫ Mx840c Version -
Dell ≫ C4140 Firmware Version < 2.16.1
   Dell ≫ C4140 Version -
Dell ≫ Dss8440 Firmware Version < 2.16.1
   Dell ≫ Dss8440 Version -
Dell ≫ T140 Firmware Version < 2.11.1
   Dell ≫ T140 Version -
Dell ≫ T340 Firmware Version < 2.11.1
   Dell ≫ T340 Version -
Dell ≫ R240 Firmware Version < 2.11.1
   Dell ≫ R240 Version -
Dell ≫ R340 Firmware Version < 2.11.1
   Dell ≫ R340 Version -
Dell ≫ Xe2420 Firmware Version < 2.16.0
   Dell ≫ Xe2420 Version -
Dell ≫ Xe7420 Firmware Version < 2.16.1
   Dell ≫ Xe7420 Version -
Dell ≫ Xe7440 Firmware Version < 2.16.1
   Dell ≫ Xe7440 Version -
Dell ≫ R730 Firmware Version < 2.16.0
   Dell ≫ R730 Version -
Dell ≫ R730xd Firmware Version < 2.16.0
   Dell ≫ R730xd Version -
Dell ≫ R630 Firmware Version < 2.16.0
   Dell ≫ R630 Version -
Dell ≫ C4130 Firmware Version < 2.16.0
   Dell ≫ C4130 Version -
Dell ≫ R930 Firmware Version < 2.16.0
   Dell ≫ R930 Version -
Dell ≫ M630 Firmware Version < 2.16.0
   Dell ≫ M630 Version -
Dell ≫ M630p Firmware Version < 2.16.0
   Dell ≫ M630p Version -
Dell ≫ Fc630 Firmware Version < 2.16.0
   Dell ≫ Fc630 Version -
Dell ≫ Fc430 Firmware Version < 2.16.0
   Dell ≫ Fc430 Version -
Dell ≫ M830 Firmware Version < 2.16.0
   Dell ≫ M830 Version -
Dell ≫ M830p Firmware Version < 2.16.0
   Dell ≫ M830p Version -
Dell ≫ Fc830 Firmware Version < 2.16.0
   Dell ≫ Fc830 Version -
Dell ≫ T630 Firmware Version < 2.16.0
   Dell ≫ T630 Version -
Dell ≫ R530 Firmware Version < 2.16.0
   Dell ≫ R530 Version -
Dell ≫ R430 Firmware Version < 2.16.0
   Dell ≫ R430 Version -
Dell ≫ T430 Firmware Version < 2.16.0
   Dell ≫ T430 Version -
Dell ≫ R830 Firmware Version < 1.16.0
   Dell ≫ R830 Version -
Dell ≫ C6320 Firmware Version < 2.16.0
   Dell ≫ C6320 Version -
Dell ≫ T130 Firmware Version < 2.16.0
   Dell ≫ T130 Version -
Dell ≫ R230 Firmware Version < 2.16.0
   Dell ≫ R230 Version -
Dell ≫ T330 Firmware Version < 2.16.0
   Dell ≫ T330 Version -
Dell ≫ R330 Firmware Version < 2.16.0
   Dell ≫ R330 Version -
Dell ≫ Nx430 Firmware Version < 2.16.0
   Dell ≫ Nx430 Version -
Dell ≫ Nx3230 Firmware Version < 2.16.0
   Dell ≫ Nx3230 Version -
Dell ≫ Nx3330 Firmware Version < 2.16.0
   Dell ≫ Nx3330 Version -
Dell ≫ Nx440 Firmware Version < 2.11.1
   Dell ≫ Nx440 Version -
Dell ≫ Nx3240 Firmware Version < 2.16.1
   Dell ≫ Nx3240 Version -
Dell ≫ Nx3340 Firmware Version < 2.16.1
   Dell ≫ Nx3340 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.108
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA-ADP 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EMC 7.5 0.8 6
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
Patch
Vendor Advisory