low3.9
CVE-2022-34376
Dell PowerEdge BIOS and Dell Precision BIOS contain an improper input validation vulnerability.
Impact
Dell PowerEdge BIOS and Dell Precision BIOS contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause a denial of service during SMM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | R6515 Firmware | before 2.9.3 |
| Dell | R7515 Firmware | before 2.9.3 |
| Dell | R6525 Firmware | before 2.9.3 |
| Dell | R7525 Firmware | before 2.9.3 |
| Dell | Xe8545 Firmware | before 2.9.4 |
| Dell | C6525 Firmware | All versions |
| Dell | R6415 Firmware | before 1.19.0 |
| Dell | R7415 Firmware | before 1.19.0 |
| Dell | R7425 Firmware | before 1.19.0 |
| Dell | R750 Firmware | before 1.8.2 |
| Dell | R750xa Firmware | before 1.8.2 |
| Dell | R650 Firmware | before 1.8.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability