CVE-2022-34410

Published: Mar 16, 2023Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.

Affected (80)

Products: Dell: R6515 Firmware, R7515 Firmware, R6525 Firmware, R7525 Firmware, Xe8545 Firmware, C6525 Firmware, R6415 Firmware, R7415 Firmware, R7425 Firmware, R750 Firmware, R750xa Firmware, R650 Firmware, C6520 Firmware, Mx750c Firmware, R450 Firmware, R550 Firmware, R650xs Firmware, R750xs Firmware, T550 Firmware, Xr11 Firmware, Xr12 Firmware, R250 Firmware, R350 Firmware, T150 Firmware, T350 Firmware, R740 Firmware, R740xd Firmware, R640 Firmware, R940 Firmware, R540 Firmware, R440 Firmware, T440 Firmware, Xr2 Firmware, R740xd2 Firmware, R840 Firmware, R940xa Firmware, T640 Firmware, C6420 Firmware, Fc640 Firmware, M640 Firmware, M640p Firmware, Mx740c Firmware, Mx840c Firmware, C4140 Firmware, Dss8440 Firmware, T140 Firmware, T340 Firmware, R240 Firmware, R340 Firmware, Xe2420 Firmware, Xe7420 Firmware, Xe7440 Firmware, R730 Firmware, R730xd Firmware, R630 Firmware, C4130 Firmware, R930 Firmware, M630 Firmware, M630p Firmware, Fc630 Firmware, Fc430 Firmware, M830 Firmware, M830p Firmware, Fc830 Firmware, T630 Firmware, R530 Firmware, R430 Firmware, T430 Firmware, R830 Firmware, C6320 Firmware, T130 Firmware, R230 Firmware, T330 Firmware, R330 Firmware, Nx430 Firmware, Nx3230 Firmware, Nx3330 Firmware, Nx440 Firmware, Nx3240 Firmware, Nx3340 Firmware

80 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R6515 Firmware	Before 2.9.3

Running on/with	Platform Versions
Dell R6515	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R7515 Firmware	Before 2.9.3

Running on/with	Platform Versions
Dell R7515	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R6525 Firmware	Before 2.9.3

Running on/with	Platform Versions
Dell R6525	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R7525 Firmware	Before 2.9.3

Running on/with	Platform Versions
Dell R7525	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xe8545 Firmware	Before 2.9.4

Running on/with	Platform Versions
Dell Xe8545	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell C6525 Firmware	All versions

Running on/with	Platform Versions
Dell C6525	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R6415 Firmware	Before 1.19.0

Running on/with	Platform Versions
Dell R6415	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R7415 Firmware	Before 1.19.0

Running on/with	Platform Versions
Dell R7415	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R7425 Firmware	Before 1.19.0

Running on/with	Platform Versions
Dell R7425	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R750 Firmware	Before 1.8.2

Running on/with	Platform Versions
Dell R750	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R750xa Firmware	Before 1.8.2

Running on/with	Platform Versions
Dell R750xa	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R650 Firmware	Before 1.8.2

Running on/with	Platform Versions
Dell R650	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell C6520 Firmware	Before 1.8.2

Running on/with	Platform Versions
Dell C6520	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Mx750c Firmware	Before 1.8.2

Running on/with	Platform Versions
Dell Mx750c	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R450 Firmware	Before 1.8.2

Running on/with	Platform Versions
Dell R450	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R550 Firmware	Before 1.8.2

Running on/with	Platform Versions
Dell R550	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R650xs Firmware	Before 1.8.2

Running on/with	Platform Versions
Dell R650xs	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R750xs Firmware	Before 1.8.2

Running on/with	Platform Versions
Dell R750xs	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell T550 Firmware	Before 1.8.2

Running on/with	Platform Versions
Dell T550	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xr11 Firmware	Before 1.8.2

Running on/with	Platform Versions
Dell Xr11	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xr12 Firmware	Before 1.8.2

Running on/with	Platform Versions
Dell Xr12	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R250 Firmware	Before 1.4.2

Running on/with	Platform Versions
Dell R250	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R350 Firmware	Before 1.4.2

Running on/with	Platform Versions
Dell R350	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell T150 Firmware	Before 1.4.2

Running on/with	Platform Versions
Dell T150	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell T350 Firmware	Before 1.4.2

Running on/with	Platform Versions
Dell T350	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R740 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell R740	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R740xd Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell R740xd	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R640 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell R640	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R940 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell R940	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R540 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell R540	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R440 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell R440	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell T440 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell T440	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xr2 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell Xr2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R740xd2 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell R740xd2	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R840 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell R840	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R940xa Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell R940xa	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell T640 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell T640	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell C6420 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell C6420	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Fc640 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell Fc640	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell M640 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell M640	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell M640p Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell M640p	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Mx740c Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell Mx740c	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Mx840c Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell Mx840c	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell C4140 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell C4140	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Dss8440 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell Dss8440	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell T140 Firmware	Before 2.11.1

Running on/with	Platform Versions
Dell T140	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell T340 Firmware	Before 2.11.1

Running on/with	Platform Versions
Dell T340	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R240 Firmware	Before 2.11.1

Running on/with	Platform Versions
Dell R240	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R340 Firmware	Before 2.11.1

Running on/with	Platform Versions
Dell R340	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xe2420 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell Xe2420	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xe7420 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell Xe7420	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xe7440 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell Xe7440	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R730 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell R730	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R730xd Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell R730xd	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R630 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell R630	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell C4130 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell C4130	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R930 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell R930	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell M630 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell M630	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell M630p Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell M630p	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Fc630 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell Fc630	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Fc430 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell Fc430	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell M830 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell M830	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell M830p Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell M830p	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Fc830 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell Fc830	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell T630 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell T630	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R530 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell R530	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R430 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell R430	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell T430 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell T430	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R830 Firmware	Before 1.16.0

Running on/with	Platform Versions
Dell R830	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell C6320 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell C6320	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell T130 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell T130	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R230 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell R230	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell T330 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell T330	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell R330 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell R330	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Nx430 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell Nx430	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Nx3230 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell Nx3230	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Nx3330 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell Nx3330	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Nx440 Firmware	Before 2.11.1

Running on/with	Platform Versions
Dell Nx440	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Nx3240 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell Nx3240	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Nx3340 Firmware	Before 2.16.1

Running on/with	Platform Versions
Dell Nx3340	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability

Source: security_alert@emc.com

PatchVendor Advisory

https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.