high
7.5
CWE
119
Advisory Published
Updated

CVE-2022-34411: Buffer Overflow

First published: Thu Mar 16 2023(Updated: )

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.

Credit: security_alert@emc.com

Affected SoftwareAffected VersionHow to fix
Dell R6515 Firmware<2.9.3
Dell R6515 Firmware
Dell R7515 Firmware<2.9.3
Dell R7515 Firmware
Dell r6525 firmware<2.9.3
Dell PowerEdge R6525
Dell R7525 Firmware<2.9.3
Dell PowerEdge R7525
Dell XE8545<2.9.4
Dell XE8545 Firmware
Dell PowerEdge c6525 firmware
Dell PowerEdge C6525
Dell R6415 Firmware<1.19.0
Dell PowerEdge R6415
Dell R7415 Firmware<1.19.0
Dell PowerEdge R7415
Dell R7425<1.19.0
Dell PowerEdge R7425
Dell R750 Firmware<1.8.2
Dell R750 Firmware
Dell PowerEdge R750XA Firmware<1.8.2
Dell PowerEdge R750XA Firmware
Dell R650 Firmware<1.8.2
Dell PowerEdge R650
Dell PowerEdge C6520<1.8.2
Dell PowerEdge C6520
Dell MX750c Firmware<1.8.2
Dell PowerEdge MX750c
Dell R450 Firmware<1.8.2
Dell R450 Firmware
Dell R550<1.8.2
Dell PowerEdge R550
Dell R650 Firmware<1.8.2
Dell PowerEdge R650xs
Dell PowerEdge R750xs Firmware<1.8.2
Dell PowerEdge R750xs
Dell PowerEdge T550 Firmware<1.8.2
Dell PowerEdge T550
Dell XR11 Firmware<1.8.2
Dell XR11 Firmware
Dell XR12 Firmware<1.8.2
Dell PowerEdge XR12
Dell R250 Firmware<1.4.2
Dell PowerEdge R250
Dell R350<1.4.2
Dell PowerEdge R350
Dell T150 Firmware<1.4.2
Dell T150 Firmware
Dell PowerEdge T350 Firmware<1.4.2
Dell PowerEdge T350
Dell R740 Firmware<2.16.1
Dell PowerEdge R740
Dell PowerEdge R740xd Firmware<2.16.1
Dell PowerEdge R740xd
Dell R640 Firmware<2.16.1
Dell R640 Firmware
Dell PowerEdge R940xa<2.16.1
Dell R940 Firmware
Dell R540 Firmware<2.16.1
Dell R540 Firmware
Dell R440 Firmware<2.16.1
Dell R440 Firmware
Dell PowerEdge T440 Firmware<2.16.1
Dell PowerEdge T440
Dell XR2 Firmware<2.16.1
Dell XR2 Firmware
Dell PowerEdge R740xd2 Firmware<2.16.1
Dell PowerEdge R740xd2
Dell R840 Firmware<2.16.1
Dell R840 Firmware
Dell PowerEdge R940xa<2.16.1
Dell PowerEdge R940xa Firmware
Dell PowerEdge T640 Firmware<2.16.1
Dell PowerEdge T640
Dell PowerEdge C6420 Firmware<2.16.1
Dell PowerEdge C6420
Dell PowerEdge FC640 Firmware<2.16.1
Dell PowerEdge FC640
Dell m640<2.16.1
Dell PowerEdge m640
Dell PowerEdge m640p Firmware<2.16.1
Dell PowerEdge m640p Firmware
Dell PowerEdge MX740c Firmware<2.16.1
Dell MX740c Firmware
Dell PowerEdge MX840c Firmware<2.16.1
Dell MX840c Firmware
Dell PowerEdge C4140 Firmware<2.16.1
Dell PowerEdge C4140
Dell DSS 8440 Firmware<2.16.1
Dell DSS 8440 Firmware
Dell PowerEdge T140 Firmware<2.11.1
Dell PowerEdge T140 Firmware
Dell T340 Firmware<2.11.1
Dell T340 Firmware
Dell R240 Firmware<2.11.1
Dell PowerEdge R240
Dell R340 Firmware<2.11.1
Dell R340 Firmware
Dell PowerEdge XE2420 Firmware<2.16.0
Dell PowerEdge XE2420
Dell XE7420 Firmware<2.16.1
Dell XE7420 Firmware
Dell XE7440 Firmware<2.16.1
Dell XE7440 Firmware
Dell PowerEdge R730 Firmware<2.16.0
Dell PowerEdge R730
Dell PowerEdge R730xd Firmware<2.16.0
Dell PowerEdge R730xd
Dell R630 Firmware<2.16.0
Dell R630 Firmware
Dell c4130 firmware<2.16.0
Dell PowerEdge C4130
Dell R930 Firmware<2.16.0
Dell R930 Firmware
Dell PowerEdge M630 Firmware<2.16.0
Dell PowerEdge M630
Dell PowerEdge M630p Firmware<2.16.0
Dell PowerEdge M630p Firmware
Dell PowerEdge FC630 Firmware<2.16.0
Dell PowerEdge FC630
Dell PowerEdge FC430 Firmware<2.16.0
Dell PowerEdge FC430 Firmware
Dell PowerEdge M830 Firmware<2.16.0
Dell m830 firmware
Dell M830<2.16.0
Dell M830
Dell PowerEdge FC830 Firmware<2.16.0
Dell PowerEdge FC830
Dell PowerEdge T630 Firmware<2.16.0
Dell PowerEdge T630
Dell R530 Firmware<2.16.0
Dell R530 Firmware
Dell R430 Firmware<2.16.0
Dell R430 Firmware
Dell PowerEdge T430 Firmware<2.16.0
Dell PowerEdge T430 Firmware
Dell PowerEdge R830 Firmware<1.16.0
Dell PowerEdge R830
Dell PowerEdge C6320 Firmware<2.16.0
Dell PowerEdge C6320
Dell T130 Firmware<2.16.0
Dell T130 Firmware
Dell R230 Firmware<2.16.0
Dell R230 Firmware
Dell PowerEdge T330 Firmware<2.16.0
Dell PowerEdge T330 Firmware
Dell R330 Firmware<2.16.0
Dell R330 Firmware
Dell Storage Nx430 Firmware<2.16.0
Dell NX430 Firmware
Dell Storage Nx3230 Firmware<2.16.0
Dell NX3230 Firmware
Dell Storage NX3330 Firmware<2.16.0
Dell NX3330 Firmware
Dell EMC NX440 Firmware<2.11.1
Dell nx440 firmware
Dell NX3240 Firmware<2.16.1
Dell NX3240 Firmware
Dell NX3340 Firmware<2.16.1
Dell NX3340 Firmware

Remedy

https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2022-34411?

    CVE-2022-34411 is rated as a critical vulnerability since it allows arbitrary code execution and denial of service by a local attacker with high privileges.

  • How do I fix CVE-2022-34411?

    To mitigate CVE-2022-34411, update the affected Dell PowerEdge BIOS or Dell Precision BIOS to the latest version provided by Dell.

  • Which systems are affected by CVE-2022-34411?

    CVE-2022-34411 impacts various models of Dell PowerEdge and Precision systems with specific BIOS versions up to 2.9.3.

  • Can CVE-2022-34411 be exploited remotely?

    No, CVE-2022-34411 requires local access and high privileges to exploit.

  • What are the potential risks of CVE-2022-34411?

    The risks associated with CVE-2022-34411 include unauthorized code execution and service disruptions on vulnerable systems.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203