high7.5
CVE-2022-34460
Prior Dell BIOS versions contain an improper input validation vulnerability.
Impact
Prior Dell BIOS versions contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | G5 Se 5505 Firmware | before 1.12.1 |
| Dell | Inspiron 27 7775 Firmware | before 2.17.0 |
| Dell | Inspiron 3180 Firmware | before 1.5.0 |
| Dell | Inspiron 3185 Firmware | before 1.5.0 |
| Dell | Inspiron 3195 2-In-1 Firmware | before 1.5.0 |
| Dell | Inspiron 3275 Firmware | before 1.9.1 |
| Dell | Inspiron 3475 Firmware | before 1.9.1 |
| Dell | Inspiron 3505 Firmware | before 1.8.0 |
| Dell | Inspiron 3515 Firmware | before 1.7.0 |
| Dell | Inspiron 3585 Firmware | before 1.9.0 |
| Dell | Inspiron 3595 Firmware | before 1.4.0 |
| Dell | Inspiron 3785 Firmware | before 1.9.0 |