CVE-2022-34403: Buffer Overflow

First published: Wed Feb 01 2023(Updated: )

Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.

Credit: security_alert@emc.com

Affected Software	Affected Version	How to fix
Dell Alienware M15 R6 Firmware	<1.17.0
Dell Alienware M15 R6
Dell Alienware M15 R7 Firmware	<1.4.3
Dell Alienware M15 R7
Dell Alienware M15 Ryzen Edition R5 Firmware	<1.8.0
Dell Alienware M15 Ryzen Edition R5
Dell Alienware M17 R5 Amd Firmware	<1.4.3
Dell Alienware M17 R5 Amd
Dell G15 5510 Firmware	<1.16.0
Dell G15 5510
Dell G15 5511 Firmware	<1.18.0
Dell G15 5511
Dell G15 5515 Firmware	<1.8.0
Dell G15 5515
Dell G15 5525 Firmware	<1.4.3
Dell G15 5525
Dell G5 Se 5505 Firmware	<1.13.0
Dell G5 Se 5505
Dell Inspiron 14 5410 2-in-1 Firmware	<2.15.2
Dell Inspiron 14 5410 2-in-1
Dell Inspiron 15 3511 Firmware	<1.18.2
Dell Inspiron 15 3511
Dell Inspiron 3195 2-in-1 Firmware	<1.6.0
Dell Inspiron 3195 2-in-1
Dell Inspiron 3275 Firmware	<1.9.2
Dell Inspiron 3275
Dell Inspiron 3475 Firmware	<1.9.2
Dell Inspiron 3475
Dell Inspiron 3505 Firmware	<1.9.0
Dell Inspiron 3505
Dell Inspiron 3515 Firmware	<1.9.0
Dell Inspiron 3515
Dell Inspiron 3525 Firmware	<1.5.0
Dell Inspiron 3525
Dell Inspiron 3585 Firmware	<1.10.0
Dell Inspiron 3585
Dell Inspiron 3595 Firmware	<1.5.0
Dell Inspiron 3595
Dell Inspiron 3785 Firmware	<1.10.0
Dell Inspiron 3785
Dell Inspiron 3891 Firmware	<1.12.0
Dell Inspiron 3891
Dell Inspiron 5310 Firmware	<2.15.0
Dell Inspiron 5310
Dell Inspiron 5405 Firmware	<1.9.0
Dell Inspiron 5405
Dell Inspiron 5410 Firmware	<2.14.0
Dell Inspiron 5410
Dell Inspiron 5415 Firmware	<1.13.0
Dell Inspiron 5415
Dell Inspiron 5425 Firmware	<1.5.0
Dell Inspiron 5425
Dell Inspiron 5485 Firmware	<2.11.0
Dell Inspiron 5485
Dell Inspiron 5485 2-in-1 Firmware	<2.11.0
Dell Inspiron 5485 2-in-1
Dell Inspiron 5505 Firmware	<1.9.0
Dell Inspiron 5505
Dell Inspiron 5510 Firmware	<2.15.2
Dell Inspiron 5510
Dell Inspiron 5515 Firmware	<1.13.0
Dell Inspiron 5515
Dell Inspiron 5585 Firmware	<2.11.0
Dell Inspiron 5585
Dell Inspiron 7405 2-in-1 Firmware	<1.10.1
Dell Inspiron 7405 2-in-1
Dell Inspiron 7415 Firmware	<1.13.0
Dell Inspiron 7415
Dell Inspiron 7425 Firmware	<1.5.0
Dell Inspiron 7425
Dell Inspiron 7510 Firmware	<1.12.0
Dell Inspiron 7510
Dell Inspiron 7610 Firmware	<1.12.0
Dell Inspiron 7610
Dell Latitude 3320 Firmware	<1.18.2
Dell Latitude 3320
Dell Latitude 3420 Firmware	<1.23.2
Dell Latitude 3420
Dell Latitude 3520 Firmware	<1.23.2
Dell Latitude 3520
Dell Latitude 5320 Firmware	<1.24.3
Dell Latitude 5320
Dell Latitude 5420 Firmware	<1.22.0
Dell Latitude 5420
Dell Latitude 5520 Firmware	<1.24.3
Dell Latitude 5520
Dell Latitude 5521 Firmware	<1.17.3
Dell Latitude 5521
Dell Latitude 7320 Firmware	<1.20.0
Dell Latitude 7320
Dell Latitude 7320 Detachable Firmware	<1.17.2
Dell Latitude 7320 Detachable
Dell Latitude 7420 Firmware	<1.20.0
Dell Latitude 7420
Dell Latitude 7520 Firmware	<1.20.0
Dell Latitude 7520
Dell Latitude 9420 Firmware	<1.16.2
Dell Latitude 9420
Dell Latitude 9520 Firmware	<1.17.0
Dell Latitude 9520
Dell Latitude Rugged 5430 Firmware	<1.12.0
Dell Latitude Rugged 5430
Dell Latitude Rugged 7330 Firmware	<1.12.0
Dell Latitude Rugged 7330
Dell Latitude 5421 Firmware	<1.15.0
Dell Latitude 5421
Dell Optiplex 5090 Firmware	<1.12.0
Dell Optiplex 5090
Dell Optiplex 5490 All-in-one Firmware	<1.15.0
Dell Optiplex 5490 All-in-one
Dell Optiplex 7090 Tower Firmware	<1.12.0
Dell Optiplex 7090 Tower
Dell Optiplex 7090 Ultra Firmware	<1.15.0
Dell Optiplex 7090 Ultra
Dell Optiplex 7090 Aio Firmware	<1.15.0
Dell Optiplex 7090 Aio
Dell Precision 3450 Firmware	<1.12.0
Dell Precision 3450
Dell Precision 3560 Firmware	<1.24.3
Dell Precision 3560
Dell Precision 3561 Firmware	<1.17.3
Dell Precision 3561
Dell Precision 3650 Tower Firmware	<1.16.0
Dell Precision 3650 Tower
Dell Precision 5560 Firmware	<1.15.2
Dell Precision 5560
Dell Precision 5760 Firmware	<1.15.2
Dell Precision 5760
Dell Precision 7560 Firmware	<1.16.0
Dell Precision 7560
Dell Precision 7760 Firmware	<1.16.0
Dell Precision 7760
Dell Vostro 3405 Firmware	<1.9.0
Dell Vostro 3405
Dell Vostro 3425 Firmware	<1.5.0
Dell Vostro 3425
Dell Vostro 3510 Firmware	<1.18.2
Dell Vostro 3510
Dell Vostro 3515 Firmware	<1.9.0
Dell Vostro 3515
Dell Vostro 3525 Firmware	<1.5.0
Dell Vostro 3525
Dell Vostro 3690 Firmware	<1.12.0
Dell Vostro 3690
Dell Vostro 3890 Firmware	<1.12.0
Dell Vostro 3890
Dell Vostro 5310 Firmware	<2.15.0
Dell Vostro 5310
Dell Vostro 5410 Firmware	<2.15.2
Dell Vostro 5410
Dell Vostro 5415 Firmware	<1.13.0
Dell Vostro 5415
Dell Vostro 5510 Firmware	<2.15.2
Dell Vostro 5510
Dell Vostro 5515 Firmware	<1.13.0
Dell Vostro 5515
Dell Vostro 5625 Firmware	<1.5.0
Dell Vostro 5625
Dell Vostro 5890 Firmware	<1.12.0
Dell Vostro 5890
Dell Vostro 7510 Firmware	<1.12.0
Dell Vostro 7510
Dell Xps 15 9510 Firmware	<1.15.2
Dell Xps 15 9510
Dell Xps 17 9710 Firmware	<1.15.2
Dell Xps 17 9710

Never miss a vulnerability like this again

Reference Links

https://www.dell.com/support/kbdoc/000205716

CVE-2022-34403: Buffer Overflow

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact