CVE-2022-34399: Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this…

PriorityP47low2.3CVSS 3.1

AVLACLPRHUINSUCLINAN

EPSS

0.18%

8.0th percentile

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM.

Affected

16 ranges

Vendor	Product	Version range	Fixed in
dell	alienware_m15_a6_firmware	< 1.4.3	1.4.3
dell	alienware_m15_ryzen_edition_r5_firmware	< 1.8.0	1.8.0
dell	alienware_m17_ryzen_edition_r5_firmware	< 1.4.3	1.4.3
dell	cpg_bios	< 1.2.2	1.2.2
dell	g15_5515_firmware	< 1.8.0	1.8.0
dell	g15_5525_firmware	< 1.4.3	1.4.3
dell	inspiron_3505_firmware	< 1.9.0	1.9.0
dell	inspiron_3515_firmware	< 1.9.0	1.9.0
dell	inspiron_3525_firmware	< 1.5.0	1.5.0
dell	inspiron_3585_firmware	< 1.10.0	1.10.0
dell	inspiron_3595_firmware	< 1.5.0	1.5.0
dell	inspiron_3785_firmware	< 1.10.0	1.10.0
dell	vostro_3405_firmware	< 1.9.0	1.9.0
dell	vostro_3425_firmware	< 1.5.0	1.5.0
dell	vostro_3515_firmware	< 1.9.0	1.9.0
dell	vostro_3525_firmware	< 1.5.0	1.5.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.