high7.5
CVE-2022-34390
Dell BIOS contains a use of uninitialized variable vulnerability.
Impact
Dell BIOS contains a use of uninitialized variable vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware Area-51 R5 Firmware | before 2.0.6 |
| Dell | Alienware Area-51 R4 Firmware | before 2.0.6 |