CVEvulnerability
CVE-2022-34414
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-03-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-119
Description
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.
Affected configurations
• dell r6515 firmware (< 2.9.3)
• dell r7515 firmware (< 2.9.3)
• dell r6525 firmware (< 2.9.3)
• dell r7525 firmware (< 2.9.3)
• dell xe8545 firmware (< 2.9.4)
• dell c6525 firmware
• dell r6415 firmware (< 1.19.0)
• dell r7415 firmware (< 1.19.0)
• dell r7425 firmware (< 1.19.0)
• dell r750 firmware (< 1.8.2)
• dell r750xa firmware (< 1.8.2)
• dell r650 firmware (< 1.8.2)
• dell c6520 firmware (< 1.8.2)
• dell mx750c firmware (< 1.8.2)
• dell r450 firmware (< 1.8.2)
• dell r550 firmware (< 1.8.2)
• dell r650xs firmware (< 1.8.2)
• dell r750xs firmware (< 1.8.2)
• dell t550 firmware (< 1.8.2)
• dell xr11 firmware (< 1.8.2)
• dell xr12 firmware (< 1.8.2)
• dell r250 firmware (< 1.4.2)
• dell r350 firmware (< 1.4.2)
• dell t150 firmware (< 1.4.2)
• dell t350 firmware (< 1.4.2)
• dell r740 firmware (< 2.16.1)
• dell r740xd firmware (< 2.16.1)
• dell r640 firmware (< 2.16.1)
• dell r940 firmware (< 2.16.1)
• dell r540 firmware (< 2.16.1)
• dell r440 firmware (< 2.16.1)
• dell t440 firmware (< 2.16.1)
• dell xr2 firmware (< 2.16.1)
• dell r740xd2 firmware (< 2.16.1)
• dell r840 firmware (< 2.16.1)
• dell r940xa firmware (< 2.16.1)
• dell t640 firmware (< 2.16.1)
• dell c6420 firmware (< 2.16.1)
• dell fc640 firmware (< 2.16.1)
• dell m640 firmware (< 2.16.1)
• dell m640p firmware (< 2.16.1)
• dell mx740c firmware (< 2.16.1)
• dell mx840c firmware (< 2.16.1)
• dell c4140 firmware (< 2.16.1)
• dell dss8440 firmware (< 2.16.1)
• dell t140 firmware (< 2.11.1)
• dell t340 firmware (< 2.11.1)
• dell r240 firmware (< 2.11.1)
• dell r340 firmware (< 2.11.1)
• dell xe2420 firmware (< 2.16.0)
• dell xe7420 firmware (< 2.16.1)
• dell xe7440 firmware (< 2.16.1)
• dell r730 firmware (< 2.16.0)
• dell r730xd firmware (< 2.16.0)
• dell r630 firmware (< 2.16.0)
• dell c4130 firmware (< 2.16.0)
• dell r930 firmware (< 2.16.0)
• dell m630 firmware (< 2.16.0)
• dell m630p firmware (< 2.16.0)
• dell fc630 firmware (< 2.16.0)
… and 20 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability Patch, Vendor Advisory
- https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability Patch, Vendor Advisory