NetSight
medium5.1

CVE-2022-34399

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability.

Impact

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM.

Affected products

VendorProductAffected versions
DellAlienware M15 A6 Firmware
before 1.4.3
DellAlienware M15 Ryzen Edition R5 Firmware
before 1.8.0
DellAlienware M17 Ryzen Edition R5 Firmware
before 1.4.3
DellG15 5515 Firmware
before 1.8.0
DellG15 5525 Firmware
before 1.4.3
DellInspiron 3505 Firmware
before 1.9.0
DellInspiron 3515 Firmware
before 1.9.0
DellInspiron 3525 Firmware
before 1.5.0
DellInspiron 3585 Firmware
before 1.10.0
DellInspiron 3595 Firmware
before 1.5.0
DellInspiron 3785 Firmware
before 1.10.0
DellVostro 3405 Firmware
before 1.9.0

Weakness classification

References