CVE-2022-34405

CVSS V2 None CVSS V3 None
Description
An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious user may potentially exploit this vulnerability by waiting for an administrator to launch the application and attach to the process to elevate privileges on the system.
Overview
  • CVE ID
  • CVE-2022-34405
  • Assigner
  • security_alert@emc.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-01-26T21:15:42
  • Last Modified Date
  • 2023-02-03T18:20:56
Weakness Enumerations
CWE URL
CWE-668 http://cwe.mitre.org/data/definitions/668.html
CWE-285 http://cwe.mitre.org/data/definitions/285.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:dell:realtek_high_definition_audio_driver:*:*:*:*:*:*:*:* 1 OR 6.0.9433.1
cpe:2.3:h:dell:alienware_m15_ryzen_edition_r5:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:g15_5515:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:a:dell:realtek_high_definition_audio_driver:*:*:*:*:*:*:*:* 1 OR 6.0.9400.1
cpe:2.3:h:dell:alienware_m15_r6:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:g15_5510:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:g15_5511:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:a:dell:realtek_high_definition_audio_driver:*:*:*:*:*:*:*:* 1 OR 6.0.9394.1
cpe:2.3:h:dell:alienware_area_51m_r1:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_area_51m_r2:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_aurora_r10:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_aurora_r11:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_aurora_r12:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_aurora_r8:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_aurora_r9:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_m15_r1:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_m15_r2:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_m15_r3:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_m15_r4:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_m17_r1:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_m17_r2:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_m17_r3:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_m17_r4:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:g5_5000:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:g5_5090:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:g5_5590:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:g7_7590:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:g7_7790:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:a:dell:realtek_high_definition_audio_driver:*:*:*:*:*:*:*:* 1 OR 6.0.9407.1
cpe:2.3:h:dell:g7_7500:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:g7_7700:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:a:dell:realtek_high_definition_audio_driver:*:*:*:*:*:*:*:* 1 OR 6.0.9388.1
cpe:2.3:h:dell:alienware_aurora_r13:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_x15_r1:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:alienware_x17_r1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:a:dell:realtek_high_definition_audio_driver:*:*:*:*:*:*:*:* 1 OR 6.0.9254.1
cpe:2.3:h:dell:g3_3590:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:a:dell:realtek_high_definition_audio_driver:*:*:*:*:*:*:*:* 1 OR 6.0.9422.1
cpe:2.3:h:dell:g3_3500:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:dell:g5_5500:-:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
https://www.dell.com/support/kbdoc/en-us/000205721/dsa-2022-316-dell-client-security-update-for-a-realtek-high-definition-audio-driver-vulnerability
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-34405
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34405
History
Created Old Value New Value Data Type Notes
2023-01-26 23:16:38 Added to TrackCVE
2023-01-26 23:16:39 Weakness Enumeration new
2023-01-27 15:14:44 2023-01-27T14:03:45 CVE Modified Date updated
2023-01-27 15:14:44 Received Awaiting Analysis Vulnerability Status updated
2023-02-02 13:14:24 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-02-03 19:15:58 2023-02-03T18:20:56 CVE Modified Date updated
2023-02-03 19:15:58 Undergoing Analysis Analyzed Vulnerability Status updated
2023-02-03 19:16:02 Weakness Enumeration update
2023-02-03 19:16:05 CPE Information updated