high7.5
CVE-2022-34407
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability.
Impact
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | R6515 Firmware | before 2.9.3 |
| Dell | R7515 Firmware | before 2.9.3 |
| Dell | R6525 Firmware | before 2.9.3 |
| Dell | R7525 Firmware | before 2.9.3 |
| Dell | Xe8545 Firmware | before 2.9.4 |
| Dell | C6525 Firmware | All versions |
| Dell | R6415 Firmware | before 1.19.0 |
| Dell | R7415 Firmware | before 1.19.0 |
| Dell | R7425 Firmware | before 1.19.0 |
| Dell | R750 Firmware | before 1.8.2 |
| Dell | R750xa Firmware | before 1.8.2 |
| Dell | R650 Firmware | before 1.8.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability