medium6.9
CVE-2022-22566
Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability.
Impact
Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware Area 51m R1 Firmware | before 1.16.0 |
| Dell | Alienware Area 51m R2 Firmware | before 1.11.0 |
| Dell | Alienware M15 R3 Firmware | before 1.12.0 |
| Dell | Alienware M15 R4 Firmware | before 1.6.2 |
| Dell | Alienware M15 R6 Firmware | before 1.6.0 after 1.6.0 before 1.8.0 |
| Dell | Alienware M17 R3 Firmware | before 1.12.0 |
| Dell | Alienware M17 R4 Firmware | before 1.6.2 |
| Dell | Chengming 3990 Firmware | before 1.6.0 |
| Dell | Chengming 3991 Firmware | before 1.6.0 |
| Dell | G15 5510 Firmware | before 1.8.0 |
| Dell | G15 5511 Firmware | before 1.9.0 |
| Dell | G3 3500 Firmware | before 1.12.0 |