CVE-2022-34399

Severity
2.3LOW
EPSS
0.1%
top 83.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 18

Description

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:NExploitability: 0.8 | Impact: 4.2

Affected Packages16 packages

🔴Vulnerability Details

2
CVEList
CVE-2022-34399: Dell Alienware m17 R5 BIOS version prior to 12023-01-18
GHSA
GHSA-xcr3-2hg5-6c3w: Dell Alienware m17 R5 BIOS version prior to 12023-01-18