HIGH🇵🇱 Wersja polska

CVE-2022-34403

CVSS 7.5v3.1pub. 2023-02-01upd. 2024-11-21

Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.

CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

  • Dell Alienware M15 R6

    HW
    Dell
    all versions

  • Dell Alienware M15 R6 Firmware

    OS
    Dell
    < 1.17.0

  • Dell Alienware M15 R7

    HW
    Dell
    all versions

  • Dell Alienware M15 R7 Firmware

    OS
    Dell
    < 1.4.3

  • Dell Alienware M15 Ryzen Edition R5

    HW
    Dell
    all versions

  • Dell Alienware M15 Ryzen Edition R5 Firmware

    OS
    Dell
    < 1.8.0

  • Dell Alienware M17 R5 Amd

    HW
    Dell
    all versions

  • Dell Alienware M17 R5 Amd Firmware

    OS
    Dell
    < 1.4.3

  • Dell G15 5510

    HW
    Dell
    all versions

  • Dell G15 5510 Firmware

    OS
    Dell
    < 1.16.0

  • Dell G15 5511

    HW
    Dell
    all versions

  • Dell G15 5511 Firmware

    OS
    Dell
    < 1.18.0

  • Dell G15 5515

    HW
    Dell
    all versions

  • Dell G15 5515 Firmware

    OS
    Dell
    < 1.8.0

  • Dell G15 5525

    HW
    Dell
    all versions

  • Dell G15 5525 Firmware

    OS
    Dell
    < 1.4.3

  • Dell G5 Se 5505

    HW
    Dell
    all versions

  • Dell G5 Se 5505 Firmware

    OS
    Dell
    < 1.13.0

  • Dell Inspiron 14 5410 2 In 1

    HW
    Dell
    all versions

  • Dell Inspiron 14 5410 2 In 1 Firmware

    OS
    Dell
    < 2.15.2

  • Dell Inspiron 15 3511

    HW
    Dell
    all versions

  • Dell Inspiron 15 3511 Firmware

    OS
    Dell
    < 1.18.2

  • Dell Inspiron 3195 2 In 1

    HW
    Dell
    all versions

  • Dell Inspiron 3195 2 In 1 Firmware

    OS
    Dell
    < 1.6.0

  • Dell Inspiron 3275

    HW
    Dell
    all versions

  • Dell Inspiron 3275 Firmware

    OS
    Dell
    < 1.9.2

  • Dell Inspiron 3475

    HW
    Dell
    all versions

  • Dell Inspiron 3475 Firmware

    OS
    Dell
    < 1.9.2

  • Dell Inspiron 3505

    HW
    Dell
    all versions

  • Dell Inspiron 3505 Firmware

    OS
    Dell
    < 1.9.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2025-43728CRITICAL9.6PL ✓same product

Obejście mechanizmu ochrony w Dell ThinOS 10 (Auth Bypass)

CVE-2021-21551HIGH8.8⚠ KEVsame product

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation ...

CVE-2025-43730HIGH8.4same product

Dell ThinOS 10, versions prior to 2508_10.0127, contains an Improper Neutralization of Argument Delimiters in ...

CVE-2025-43729HIGH7.8same product

Dell ThinOS 10, versions prior to 2508_10.0127, contains an Incorrect Permission Assignment for Critical Resou...

CVE-2025-43882HIGH7.8same product

Dell ThinOS 10, versions prior to 2508_10.0127, contains an Unverified Ownership vulnerability. A local low-pr...