high
7.5
CWE
119
Advisory Published
Updated

CVE-2022-34421: Buffer Overflow

First published: Thu Mar 16 2023(Updated: )

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.

Credit: security_alert@emc.com

Affected SoftwareAffected VersionHow to fix
Dell R6515 Firmware<2.9.3
Dell R6515 Firmware
Dell R7515 Firmware<2.9.3
Dell R7515 Firmware
Dell r6525 firmware<2.9.3
Dell PowerEdge R6525
Dell R7525 Firmware<2.9.3
Dell PowerEdge R7525
Dell XE8545<2.9.4
Dell XE8545 Firmware
Dell PowerEdge c6525 firmware
Dell PowerEdge C6525
Dell R6415 Firmware<1.19.0
Dell PowerEdge R6415
Dell R7415 Firmware<1.19.0
Dell PowerEdge R7415
Dell R7425<1.19.0
Dell PowerEdge R7425
Dell R750 Firmware<1.8.2
Dell R750 Firmware
Dell PowerEdge R750XA Firmware<1.8.2
Dell PowerEdge R750XA Firmware
Dell R650 Firmware<1.8.2
Dell PowerEdge R650
Dell PowerEdge C6520<1.8.2
Dell PowerEdge C6520
Dell MX750c Firmware<1.8.2
Dell PowerEdge MX750c
Dell R450 Firmware<1.8.2
Dell R450 Firmware
Dell R550<1.8.2
Dell PowerEdge R550
Dell R650 Firmware<1.8.2
Dell PowerEdge R650xs
Dell PowerEdge R750xs Firmware<1.8.2
Dell PowerEdge R750xs
Dell PowerEdge T550 Firmware<1.8.2
Dell PowerEdge T550
Dell XR11 Firmware<1.8.2
Dell XR11 Firmware
Dell XR12 Firmware<1.8.2
Dell PowerEdge XR12
Dell R250 Firmware<1.4.2
Dell PowerEdge R250
Dell R350<1.4.2
Dell PowerEdge R350
Dell T150 Firmware<1.4.2
Dell T150 Firmware
Dell PowerEdge T350 Firmware<1.4.2
Dell PowerEdge T350
Dell R740 Firmware<2.16.1
Dell PowerEdge R740
Dell PowerEdge R740xd Firmware<2.16.1
Dell PowerEdge R740xd
Dell R640 Firmware<2.16.1
Dell R640 Firmware
Dell PowerEdge R940xa<2.16.1
Dell R940 Firmware
Dell R540 Firmware<2.16.1
Dell R540 Firmware
Dell R440 Firmware<2.16.1
Dell R440 Firmware
Dell PowerEdge T440 Firmware<2.16.1
Dell PowerEdge T440
Dell XR2 Firmware<2.16.1
Dell XR2 Firmware
Dell PowerEdge R740xd2 Firmware<2.16.1
Dell PowerEdge R740xd2
Dell R840 Firmware<2.16.1
Dell R840 Firmware
Dell PowerEdge R940xa<2.16.1
Dell PowerEdge R940xa Firmware
Dell PowerEdge T640 Firmware<2.16.1
Dell PowerEdge T640
Dell PowerEdge C6420 Firmware<2.16.1
Dell PowerEdge C6420
Dell PowerEdge FC640 Firmware<2.16.1
Dell PowerEdge FC640
Dell m640<2.16.1
Dell PowerEdge m640
Dell PowerEdge m640p Firmware<2.16.1
Dell PowerEdge m640p Firmware
Dell PowerEdge MX740c Firmware<2.16.1
Dell MX740c Firmware
Dell PowerEdge MX840c Firmware<2.16.1
Dell MX840c Firmware
Dell PowerEdge C4140 Firmware<2.16.1
Dell PowerEdge C4140
Dell DSS 8440 Firmware<2.16.1
Dell DSS 8440 Firmware
Dell PowerEdge T140 Firmware<2.11.1
Dell PowerEdge T140 Firmware
Dell T340 Firmware<2.11.1
Dell T340 Firmware
Dell R240 Firmware<2.11.1
Dell PowerEdge R240
Dell R340 Firmware<2.11.1
Dell R340 Firmware
Dell PowerEdge XE2420 Firmware<2.16.0
Dell PowerEdge XE2420
Dell XE7420 Firmware<2.16.1
Dell XE7420 Firmware
Dell XE7440 Firmware<2.16.1
Dell XE7440 Firmware
Dell PowerEdge R730 Firmware<2.16.0
Dell PowerEdge R730
Dell PowerEdge R730xd Firmware<2.16.0
Dell PowerEdge R730xd
Dell R630 Firmware<2.16.0
Dell R630 Firmware
Dell c4130 firmware<2.16.0
Dell PowerEdge C4130
Dell R930 Firmware<2.16.0
Dell R930 Firmware
Dell PowerEdge M630 Firmware<2.16.0
Dell PowerEdge M630
Dell PowerEdge M630p Firmware<2.16.0
Dell PowerEdge M630p Firmware
Dell PowerEdge FC630 Firmware<2.16.0
Dell PowerEdge FC630
Dell PowerEdge FC430 Firmware<2.16.0
Dell PowerEdge FC430 Firmware
Dell PowerEdge M830 Firmware<2.16.0
Dell m830 firmware
Dell M830<2.16.0
Dell M830
Dell PowerEdge FC830 Firmware<2.16.0
Dell PowerEdge FC830
Dell PowerEdge T630 Firmware<2.16.0
Dell PowerEdge T630
Dell R530 Firmware<2.16.0
Dell R530 Firmware
Dell R430 Firmware<2.16.0
Dell R430 Firmware
Dell PowerEdge T430 Firmware<2.16.0
Dell PowerEdge T430 Firmware
Dell PowerEdge R830 Firmware<1.16.0
Dell PowerEdge R830
Dell PowerEdge C6320 Firmware<2.16.0
Dell PowerEdge C6320
Dell T130 Firmware<2.16.0
Dell T130 Firmware
Dell R230 Firmware<2.16.0
Dell R230 Firmware
Dell PowerEdge T330 Firmware<2.16.0
Dell PowerEdge T330 Firmware
Dell R330 Firmware<2.16.0
Dell R330 Firmware
Dell Storage Nx430 Firmware<2.16.0
Dell NX430 Firmware
Dell Storage Nx3230 Firmware<2.16.0
Dell NX3230 Firmware
Dell Storage NX3330 Firmware<2.16.0
Dell NX3330 Firmware
Dell EMC NX440 Firmware<2.11.1
Dell nx440 firmware
Dell NX3240 Firmware<2.16.1
Dell NX3240 Firmware
Dell NX3340 Firmware<2.16.1
Dell NX3340 Firmware

Remedy

https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2022-34421?

    CVE-2022-34421 has been classified as a medium severity vulnerability mainly due to its potential for arbitrary code execution and denial of service.

  • How do I fix CVE-2022-34421?

    The issue can be mitigated by updating the affected Dell PowerEdge and Precision BIOS to the latest firmware version provided by Dell.

  • Which systems are impacted by CVE-2022-34421?

    CVE-2022-34421 affects various models of Dell PowerEdge BIOS and Dell Precision BIOS versions up to 2.9.3.

  • What types of attacks can exploit CVE-2022-34421?

    Exploitation of CVE-2022-34421 could allow a local malicious user with high privileges to execute arbitrary code or cause a denial of service.

  • Who should be concerned about CVE-2022-34421?

    Organizations using affected Dell PowerEdge and Precision systems should prioritize addressing CVE-2022-34421 to prevent potential exploitation.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203