CVE-2022-34460

Published: Jan 18, 2023Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 1.1 / Impact: 6.0

Source: NVD

Description

Prior Dell BIOS versions contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Affected (26)

Dell

26 products

G5 Se 5505 Firmware

Inspiron 27 7775 Firmware

Inspiron 3180 Firmware

Inspiron 3185 Firmware

Inspiron 3195 2 In 1 Firmware

Inspiron 3275 Firmware

Inspiron 3475 Firmware

Inspiron 3505 Firmware

Inspiron 3515 Firmware

Inspiron 3585 Firmware

Inspiron 3595 Firmware

Inspiron 3785 Firmware

Inspiron 5405 Firmware

Inspiron 5415 Firmware

Inspiron 5485 Firmware

Inspiron 5485 2 In 1 Firmware

Inspiron 5505 Firmware

Inspiron 5515 Firmware

Inspiron 5585 Firmware

Inspiron 7375 Firmware

Inspiron 7405 2 In 1 Firmware

Inspiron 7415 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell G5 Se 5505 Firmware	Before 1.12.1

Running on/with	Platform Versions
Dell G5 Se 5505	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 27 7775 Firmware	Before 2.17.0

Running on/with	Platform Versions
Dell Inspiron 27 7775	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3180 Firmware	Before 1.5.0

Running on/with	Platform Versions
Dell Inspiron 3180	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3185 Firmware	Before 1.5.0

Running on/with	Platform Versions
Dell Inspiron 3185	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3195 2 In 1 Firmware	Before 1.5.0

Running on/with	Platform Versions
Dell Inspiron 3195 2 In 1	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3275 Firmware	Before 1.9.1

Running on/with	Platform Versions
Dell Inspiron 3275	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3475 Firmware	Before 1.9.1

Running on/with	Platform Versions
Dell Inspiron 3475	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3505 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Inspiron 3505	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3515 Firmware	Before 1.7.0

Running on/with	Platform Versions
Dell Inspiron 3515	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3585 Firmware	Before 1.9.0

Running on/with	Platform Versions
Dell Inspiron 3585	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3595 Firmware	Before 1.4.0

Running on/with	Platform Versions
Dell Inspiron 3595	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3785 Firmware	Before 1.9.0

Running on/with	Platform Versions
Dell Inspiron 3785	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5405 Firmware	Before 1.8.1

Running on/with	Platform Versions
Dell Inspiron 5405	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5415 Firmware	Before 1.12.0

Running on/with	Platform Versions
Dell Inspiron 5415	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5485 Firmware	Before 2.10.1

Running on/with	Platform Versions
Dell Inspiron 5485	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5485 2 In 1 Firmware	Before 2.10.1

Running on/with	Platform Versions
Dell Inspiron 5485 2 In 1	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5505 Firmware	Before 1.8.1

Running on/with	Platform Versions
Dell Inspiron 5505	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5515 Firmware	Before 1.12.0

Running on/with	Platform Versions
Dell Inspiron 5515	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5585 Firmware	Before 2.10.1

Running on/with	Platform Versions
Dell Inspiron 5585	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 7375 Firmware	Before 1.9.0

Running on/with	Platform Versions
Dell Inspiron 7375	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 7405 2 In 1 Firmware	Before 1.9.1

Running on/with	Platform Versions
Dell Inspiron 7405 2 In 1	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 7415 Firmware	Before 1.12.0

Running on/with	Platform Versions
Dell Inspiron 7415	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 3405 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Vostro 3405	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 3515 Firmware	Before 1.7.0

Running on/with	Platform Versions
Dell Vostro 3515	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 5415 Firmware	Before 1.12.0

Running on/with	Platform Versions
Dell Vostro 5415	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 5515 Firmware	Before 1.12.0

Running on/with	Platform Versions
Dell Vostro 5515	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.dell.com/support/kbdoc/000204686

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/000204686

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.