CVE-2022-34401

CVSS V2 None CVSS V3 None
Description
Dell BIOS contains a stack based buffer overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter in order to gain arbitrary code execution in SMRAM.
Overview
  • CVE ID
  • CVE-2022-34401
  • Assigner
  • security_alert@emc.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-01-18T06:15:11
  • Last Modified Date
  • 2023-01-25T19:29:37
Weakness Enumerations
CWE URL
CWE-787 http://cwe.mitre.org/data/definitions/787.html
CWE-121 http://cwe.mitre.org/data/definitions/121.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:dell:alienware_m15_a6_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.3
cpe:2.3:h:dell:alienware_m15_a6:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:alienware_m17_ryzen_r5_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.3
cpe:2.3:h:dell:alienware_m17_ryzen_r5:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:dell:g15_5525_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.3
cpe:2.3:h:dell:g15_5525:-:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
https://www.dell.com/support/kbdoc/000204679
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-34401
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34401
History
Created Old Value New Value Data Type Notes
2023-01-18 07:15:16 Added to TrackCVE
2023-01-18 07:15:16 Weakness Enumeration new
2023-01-18 14:15:42 2023-01-18T13:54:48 CVE Modified Date updated
2023-01-18 14:15:42 Received Awaiting Analysis Vulnerability Status updated
2023-01-25 13:13:35 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-25 20:13:44 2023-01-25T19:29:37 CVE Modified Date updated
2023-01-25 20:13:44 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-25 20:13:47 Weakness Enumeration update
2023-01-25 20:13:49 CPE Information updated