Lucene search

[email protected]CVE-2022-34413

HistoryMar 16, 2023 - 12:15 p.m.

CVE-2022-34413

2023-03-1612:15:10

CWE-119

[email protected]

web.nvd.nist.gov

dell

bios

vulnerability

arbitrary code execution

cve-2022-34413

nvd

7.5 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.

Affected configurations

NVD

Node

dellr6515_firmwareRange<2.9.3

AND

dellr6515Match-

Node

dellr7515_firmwareRange<2.9.3

AND

dellr7515Match-

Node

dellr6525_firmwareRange<2.9.3

AND

dellr6525Match-

Node

dellr7525_firmwareRange<2.9.3

AND

dellr7525Match-

Node

dellxe8545_firmwareRange<2.9.4

AND

dellxe8545Match-

Node

dellc6525_firmware

AND

dellc6525Match-

Node

dellr6415_firmwareRange<1.19.0

AND

dellr6415Match-

Node

dellr7415_firmwareRange<1.19.0

AND

dellr7415Match-

Node

dellr7425_firmwareRange<1.19.0

AND

dellr7425Match-

Node

dellr750_firmwareRange<1.8.2

AND

dellr750Match-

Node

dellr750xa_firmwareRange<1.8.2

AND

dellr750xaMatch-

Node

dellr650_firmwareRange<1.8.2

AND

dellr650Match-

Node

dellc6520_firmwareRange<1.8.2

AND

dellc6520Match-

Node

dellmx750c_firmwareRange<1.8.2

AND

dellmx750cMatch-

Node

dellr450_firmwareRange<1.8.2

AND

dellr450Match-

Node

dellr550_firmwareRange<1.8.2

AND

dellr550Match-

Node

dellr650xs_firmwareRange<1.8.2

AND

dellr650xsMatch-

Node

dellr750xs_firmwareRange<1.8.2

AND

dellr750xsMatch-

Node

dellt550_firmwareRange<1.8.2

AND

dellt550Match-

Node

dellxr11_firmwareRange<1.8.2

AND

dellxr11Match-

Node

dellxr12_firmwareRange<1.8.2

AND

dellxr12Match-

Node

dellr250_firmwareRange<1.4.2

AND

dellr250Match-

Node

dellr350_firmwareRange<1.4.2

AND

dellr350Match-

Node

dellt150_firmwareRange<1.4.2

AND

dellt150Match-

Node

dellt350_firmwareRange<1.4.2

AND

dellt350Match-

Node

dellr740_firmwareRange<2.16.1

AND

dellr740Match-

Node

dellr740xd_firmwareRange<2.16.1

AND

dellr740xdMatch-

Node

dellr640_firmwareRange<2.16.1

AND

dellr640Match-

Node

dellr940_firmwareRange<2.16.1

AND

dellr940Match-

Node

dellr540_firmwareRange<2.16.1

AND

dellr540Match-

Node

dellr440_firmwareRange<2.16.1

AND

dellr440Match-

Node

dellt440_firmwareRange<2.16.1

AND

dellt440Match-

Node

dellxr2_firmwareRange<2.16.1

AND

dellxr2Match-

Node

dellr740xd2_firmwareRange<2.16.1

AND

dellr740xd2Match-

Node

dellr840_firmwareRange<2.16.1

AND

dellr840Match-

Node

dellr940xa_firmwareRange<2.16.1

AND

dellr940xaMatch-

Node

dellt640_firmwareRange<2.16.1

AND

dellt640Match-

Node

dellc6420_firmwareRange<2.16.1

AND

dellc6420Match-

Node

dellfc640_firmwareRange<2.16.1

AND

dellfc640Match-

Node

dellm640_firmwareRange<2.16.1

AND

dellm640Match-

Node

dellm640p_firmwareRange<2.16.1

AND

dellm640pMatch-

Node

dellmx740c_firmwareRange<2.16.1

AND

dellmx740cMatch-

Node

dellmx840c_firmwareRange<2.16.1

AND

dellmx840cMatch-

Node

dellc4140_firmwareRange<2.16.1

AND

dellc4140Match-

Node

delldss8440_firmwareRange<2.16.1

AND

delldss8440Match-

Node

dellt140_firmwareRange<2.11.1

AND

dellt140Match-

Node

dellt340_firmwareRange<2.11.1

AND

dellt340Match-

Node

dellr240_firmwareRange<2.11.1

AND

dellr240Match-

Node

dellr340_firmwareRange<2.11.1

AND

dellr340Match-

Node

dellxe2420_firmwareRange<2.16.0

AND

dellxe2420Match-

Node

dellxe7420_firmwareRange<2.16.1

AND

dellxe7420Match-

Node

dellxe7440_firmwareRange<2.16.1

AND

dellxe7440Match-

Node

dellr730_firmwareRange<2.16.0

AND

dellr730Match-

Node

dellr730xd_firmwareRange<2.16.0

AND

dellr730xdMatch-

Node

dellr630_firmwareRange<2.16.0

AND

dellr630Match-

Node

dellc4130_firmwareRange<2.16.0

AND

dellc4130Match-

Node

dellr930_firmwareRange<2.16.0

AND

dellr930Match-

Node

dellm630_firmwareRange<2.16.0

AND

dellm630Match-

Node

dellm630p_firmwareRange<2.16.0

AND

dellm630pMatch-

Node

dellfc630_firmwareRange<2.16.0

AND

dellfc630Match-

Node

dellfc430_firmwareRange<2.16.0

AND

dellfc430Match-

Node

dellm830_firmwareRange<2.16.0

AND

dellm830Match-

Node

dellm830p_firmwareRange<2.16.0

AND

dellm830pMatch-

Node

dellfc830_firmwareRange<2.16.0

AND

dellfc830Match-

Node

dellt630_firmwareRange<2.16.0

AND

dellt630Match-

Node

dellr530_firmwareRange<2.16.0

AND

dellr530Match-

Node

dellr430_firmwareRange<2.16.0

AND

dellr430Match-

Node

dellt430_firmwareRange<2.16.0

AND

dellt430Match-

Node

dellr830_firmwareRange<1.16.0

AND

dellr830Match-

Node

dellc6320_firmwareRange<2.16.0

AND

dellc6320Match-

Node

dellt130_firmwareRange<2.16.0

AND

dellt130Match-

Node

dellr230_firmwareRange<2.16.0

AND

dellr230Match-

Node

dellt330_firmwareRange<2.16.0

AND

dellt330Match-

Node

dellr330_firmwareRange<2.16.0

AND

dellr330Match-

Node

dellnx430_firmwareRange<2.16.0

AND

dellnx430Match-

Node

dellnx3230_firmwareRange<2.16.0

AND

dellnx3230Match-

Node

dellnx3330_firmwareRange<2.16.0

AND

dellnx3330Match-

Node

dellnx440_firmwareRange<2.11.1

AND

dellnx440Match-

Node

dellnx3240_firmwareRange<2.16.1

AND

dellnx3240Match-

Node

dellnx3340_firmwareRange<2.16.1

AND

dellnx3340Match-

CPENameOperatorVersion
dell:r6515_firmwaredell r6515 firmwarelt2.9.3

CPE	Name	Operator	Version
dell:r6515_firmware	dell r6515 firmware	lt	2.9.3

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "PowerEdge Platform",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "14G,15G"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability

7.5 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-34413

prion1 cvelist1 nvd1