CVE-2022-34376 : Dell PowerEdge BIOS and Dell Precision BIOS contain an improper input validation vulnerability. A local authenticated ma

Dell PowerEdge BIOS and Dell Precision BIOS contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause a denial of service during SMM.

Published 2023-02-10 20:15:53

Updated 2023-07-21 18:49:09

Source Dell

View at NVD, CVE.org

Vulnerability category: OverflowDenial of service

Products affected by CVE-2022-34376

Dell » R6415 Firmware
Versions before (<) 1.19.0
cpe:2.3:o:dell:r6415_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R6415 » Version: N/A
Dell » R7415 Firmware
Versions before (<) 1.19.0
cpe:2.3:o:dell:r7415_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R7415 » Version: N/A
Dell » R7425 Firmware
Versions before (<) 1.19.0
cpe:2.3:o:dell:r7425_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R7425 » Version: N/A
Dell » R730 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:r730_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R730 » Version: N/A
Dell » R730xd Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:r730xd_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R730xd » Version: N/A
Dell » R630 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:r630_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R630 » Version: N/A
Dell » C4130 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:c4130_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » C4130 » Version: N/A
Dell » M630 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:m630_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » M630 » Version: N/A
Dell » M630p Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:m630p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » M630p » Version: N/A
Dell » Fc630 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:fc630_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Fc630 » Version: N/A
Dell » Fc430 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:fc430_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Fc430 » Version: N/A
Dell » M830 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:m830_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » M830 » Version: N/A
Dell » M830p Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:m830p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » M830p » Version: N/A
Dell » Fc830 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:fc830_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Fc830 » Version: N/A
Dell » T630 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:t630_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » T630 » Version: N/A
Dell » R530 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:r530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R530 » Version: N/A
Dell » R430 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:r430_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R430 » Version: N/A
Dell » T430 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:t430_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » T430 » Version: N/A
Dell » R830 Firmware
Versions before (<) 1.16.0
cpe:2.3:o:dell:r830_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R830 » Version: N/A
Dell » C6320 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:c6320_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » C6320 » Version: N/A
Dell » R6515 Firmware
Versions before (<) 2.9.3
cpe:2.3:o:dell:r6515_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R6515 » Version: N/A
Dell » R7515 Firmware
Versions before (<) 2.9.3
cpe:2.3:o:dell:r7515_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R7515 » Version: N/A
Dell » R6525 Firmware
Versions before (<) 2.9.3
cpe:2.3:o:dell:r6525_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R6525 » Version: N/A
Dell » R7525 Firmware
Versions before (<) 2.9.3
cpe:2.3:o:dell:r7525_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R7525 » Version: N/A
Dell » Xe8545 Firmware
Versions before (<) 2.9.4
cpe:2.3:o:dell:xe8545_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xe8545 » Version: N/A
Dell » C6525 Firmware
cpe:2.3:o:dell:c6525_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » C6525 » Version: N/A
Dell » R750 Firmware
Versions before (<) 1.8.2
cpe:2.3:o:dell:r750_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R750 » Version: N/A
Dell » R750xa Firmware
Versions before (<) 1.8.2
cpe:2.3:o:dell:r750xa_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R750xa » Version: N/A
Dell » R650 Firmware
Versions before (<) 1.8.2
cpe:2.3:o:dell:r650_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R650 » Version: N/A
Dell » C6520 Firmware
Versions before (<) 1.8.2
cpe:2.3:o:dell:c6520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » C6520 » Version: N/A
Dell » Mx750c Firmware
Versions before (<) 1.8.2
cpe:2.3:o:dell:mx750c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Mx750c » Version: N/A
Dell » R450 Firmware
Versions before (<) 1.8.2
cpe:2.3:o:dell:r450_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R450 » Version: N/A
Dell » R550 Firmware
Versions before (<) 1.8.2
cpe:2.3:o:dell:r550_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R550 » Version: N/A
Dell » R650xs Firmware
Versions before (<) 1.8.2
cpe:2.3:o:dell:r650xs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R650xs » Version: N/A
Dell » R750xs Firmware
Versions before (<) 1.8.2
cpe:2.3:o:dell:r750xs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R750xs » Version: N/A
Dell » T550 Firmware
Versions before (<) 1.8.2
cpe:2.3:o:dell:t550_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » T550 » Version: N/A
Dell » Xr11 Firmware
Versions before (<) 1.8.2
cpe:2.3:o:dell:xr11_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xr11 » Version: N/A
Dell » Xr12 Firmware
Versions before (<) 1.8.2
cpe:2.3:o:dell:xr12_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xr12 » Version: N/A
Dell » R250 Firmware
Versions before (<) 1.4.2
cpe:2.3:o:dell:r250_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R250 » Version: N/A
Dell » R350 Firmware
Versions before (<) 1.4.2
cpe:2.3:o:dell:r350_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R350 » Version: N/A
Dell » T150 Firmware
Versions before (<) 1.4.2
cpe:2.3:o:dell:t150_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » T150 » Version: N/A
Dell » T350 Firmware
Versions before (<) 1.4.2
cpe:2.3:o:dell:t350_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » T350 » Version: N/A
Dell » R740 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:r740_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R740 » Version: N/A
Dell » R740xd Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:r740xd_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R740xd » Version: N/A
Dell » R640 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:r640_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R640 » Version: N/A
Dell » R940 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:r940_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R940 » Version: N/A
Dell » R540 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:r540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R540 » Version: N/A
Dell » R440 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:r440_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R440 » Version: N/A
Dell » T440 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:t440_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » T440 » Version: N/A
Dell » Xr2 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:xr2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » XR2 » Version: N/A
Dell » R740xd2 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:r740xd2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R740xd2 » Version: N/A
Dell » R840 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:r840_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R840 » Version: N/A
Dell » R940xa Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:r940xa_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R940xa » Version: N/A
Dell » T640 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:t640_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » T640 » Version: N/A
Dell » C6420 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:c6420_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » C6420 » Version: N/A
Dell » Fc640 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:fc640_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Fc640 » Version: N/A
Dell » M640 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:m640_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » M640 » Version: N/A
Dell » M640p Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:m640p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » M640p » Version: N/A
Dell » Mx740c Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:mx740c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Mx740c » Version: N/A
Dell » Mx840c Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:mx840c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Mx840c » Version: N/A
Dell » C4140 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:c4140_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » C4140 » Version: N/A
Dell » Dss8440 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:dss8440_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Dss8440 » Version: N/A
Dell » T140 Firmware
Versions before (<) 2.11.1
cpe:2.3:o:dell:t140_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » T140 » Version: N/A
Dell » T340 Firmware
Versions before (<) 2.11.1
cpe:2.3:o:dell:t340_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » T340 » Version: N/A
Dell » R240 Firmware
Versions before (<) 2.11.1
cpe:2.3:o:dell:r240_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R240 » Version: N/A
Dell » R340 Firmware
Versions before (<) 2.11.1
cpe:2.3:o:dell:r340_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R340 » Version: N/A
Dell » Xe2420 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:xe2420_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xe2420 » Version: N/A
Dell » Xe7420 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:xe7420_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xe7420 » Version: N/A
Dell » Xe7440 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:xe7440_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xe7440 » Version: N/A
Dell » R930 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:r930_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R930 » Version: N/A
Dell » T130 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:t130_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » T130 » Version: N/A
Dell » R230 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:r230_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R230 » Version: N/A
Dell » T330 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:t330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » T330 » Version: N/A
Dell » R330 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:r330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » R330 » Version: N/A
Dell » Nx430 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:nx430_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Nx430 » Version: N/A
Dell » Nx3230 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:nx3230_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Nx3230 » Version: N/A
Dell » Nx3330 Firmware
Versions before (<) 2.16.0
cpe:2.3:o:dell:nx3330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Nx3330 » Version: N/A
Dell » Nx440 Firmware
Versions before (<) 2.11.1
cpe:2.3:o:dell:nx440_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Nx440 » Version: N/A
Dell » Nx3240 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:nx3240_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Nx3240 » Version: N/A
Dell » Nx3340 Firmware
Versions before (<) 2.16.1
cpe:2.3:o:dell:nx3340_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Nx3340 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-34376

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-34376

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
3.9	LOW	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L	0.8	2.7	Dell
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Changed Confidentiality: None Integrity: Low Availability: Low

CWE ids for CVE-2022-34376

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
Assigned by:
- nvd@nist.gov (Primary)
- security_alert@emc.com (Secondary)

References for CVE-2022-34376

https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability

Access Denied
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-34376

Products affected by CVE-2022-34376

Exploit prediction scoring system (EPSS) score for CVE-2022-34376

CVSS scores for CVE-2022-34376

CWE ids for CVE-2022-34376

References for CVE-2022-34376