Lucene search

[email protected]CVE-2022-34460

HistoryJan 18, 2023 - 6:15 a.m.

CVE-2022-34460

2023-01-1806:15:11

CWE-20

[email protected]

web.nvd.nist.gov

dell

bios

input validation

vulnerability

cve-2022-34460

smi

arbitrary code execution

smram

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Prior Dell BIOS versions contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Affected configurations

NVD

Node

dellg5_se_5505_firmwareRange<1.12.1

AND

dellg5_se_5505Match-

Node

dellinspiron_27_7775_firmwareRange<2.17.0

AND

dellinspiron_27_7775Match-

Node

dellinspiron_3180_firmwareRange<1.5.0

AND

dellinspiron_3180Match-

Node

dellinspiron_3185_firmwareRange<1.5.0

AND

dellinspiron_3185Match-

Node

dellinspiron_3195_2-in-1_firmwareRange<1.5.0

AND

dellinspiron_3195_2-in-1Match-

Node

dellinspiron_3275_firmwareRange<1.9.1

AND

dellinspiron_3275Match-

Node

dellinspiron_3475_firmwareRange<1.9.1

AND

dellinspiron_3475Match-

Node

dellinspiron_3505_firmwareRange<1.8.0

AND

dellinspiron_3505Match-

Node

dellinspiron_3515_firmwareRange<1.7.0

AND

dellinspiron_3515Match-

Node

dellinspiron_3585_firmwareRange<1.9.0

AND

dellinspiron_3585Match-

Node

dellinspiron_3595_firmwareRange<1.4.0

AND

dellinspiron_3595Match-

Node

dellinspiron_3785_firmwareRange<1.9.0

AND

dellinspiron_3785Match-

Node

dellinspiron_5405_firmwareRange<1.8.1

AND

dellinspiron_5405Match-

Node

dellinspiron_5415_firmwareRange<1.12.0

AND

dellinspiron_5415Match-

Node

dellinspiron_5485_firmwareRange<2.10.1

AND

dellinspiron_5485Match-

Node

dellinspiron_5485_2-in-1_firmwareRange<2.10.1

AND

dellinspiron_5485_2-in-1Match-

Node

dellinspiron_5505_firmwareRange<1.8.1

AND

dellinspiron_5505Match-

Node

dellinspiron_5515_firmwareRange<1.12.0

AND

dellinspiron_5515Match-

Node

dellinspiron_5585_firmwareRange<2.10.1

AND

dellinspiron_5585Match-

Node

dellinspiron_7375_firmwareRange<1.9.0

AND

dellinspiron_7375Match-

Node

dellinspiron_7405_2-in-1_firmwareRange<1.9.1

AND

dellinspiron_7405_2-in-1Match-

Node

dellinspiron_7415_firmwareRange<1.12.0

AND

dellinspiron_7415Match-

Node

dellvostro_3405_firmwareRange<1.8.0

AND

dellvostro_3405Match-

Node

dellvostro_3515_firmwareRange<1.7.0

AND

dellvostro_3515Match-

Node

dellvostro_5415_firmwareRange<1.12.0

AND

dellvostro_5415Match-

Node

dellvostro_5515_firmwareRange<1.12.0

AND

dellvostro_5515Match-

CPENameOperatorVersion
dell:g5_se_5505_firmwaredell g5 se 5505 firmwarelt1.12.1

CPE	Name	Operator	Version
dell:g5_se_5505_firmware	dell g5 se 5505 firmware	lt	1.12.1

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "BIOS",
    "vendor": "Dell",
    "versions": [
      {
        "lessThanOrEqual": "2.17.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]