high7.5
CVE-2022-34391
Dell Client BIOS Versions prior to the remediated version contain an improper input validation vulnerability.
Impact
Dell Client BIOS Versions prior to the remediated version contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware Area-51 R5 Firmware | before 2.0.6 |
| Dell | Alienware Area-51 R4 Firmware | before 2.0.6 |