high7.5
CVE-2022-34398
Dell BIOS contains a Time-of-check Time-of-use vulnerability.
Impact
Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware Area 51m R1 Firmware | before 1.22.2 |
| Dell | Alienware Area 51m R2 Firmware | before 1.19.0 |
| Dell | Alienware Aurora R10 Firmware | before 2.3.2 |
| Dell | Alienware Aurora R11 Firmware | before 1.0.17 |
| Dell | Alienware Aurora R12 Firmware | before 1.1.17 |
| Dell | Alienware Aurora R13 Firmware | before 1.7.0 |
| Dell | Alienware Aurora R8 Firmware | before 1.0.26 |
| Dell | Alienware Aurora R9 Firmware | before 1.0.22 |
| Dell | Alienware M15 R1 Firmware | before 2.15.0 |
| Dell | Alienware M15 R2 Firmware | before 1.18.3 |
| Dell | Alienware M15 R3 Firmware | before 1.20.0 |
| Dell | Alienware M15 R4 Firmware | before 1.14.0 |