Threat Investigation
Request a demo

CVE-2022-22558

Medium

Description

Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service.

SeverityMedium
CVSS5.7
Exploit probability—
ProductDell R6415 Firmware
PublishedApr 21, 2022
First seenApr 21, 2022
Weakness typeCWE-119Memory buffer bounds error

How to fix

Update
  • dell r6415_firmware1.18.0 or later
  • dell r7415_firmware1.18.0 or later
  • dell r7425_firmware1.18.0 or later
  • dell r730_firmware2.14.0 or later
  • dell r730xd_firmware2.14.0 or later
  • dell r630_firmware2.14.0 or later
  • dell c4130_firmware2.14.0 or later
  • dell m630_firmware2.14.0 or later
  • dell m630p_firmware2.14.0 or later
  • dell fc630_firmware2.14.0 or later
  • dell fc430_firmware2.14.0 or later
  • dell m830_firmware2.14.0 or later

Affected products

ProductAffected versionsFixed in
dell r6415_firmwarev < 1.18.01.18.0
dell r7415_firmwarev < 1.18.01.18.0
dell r7425_firmwarev < 1.18.01.18.0
dell r730_firmwarev < 2.14.02.14.0
dell r730xd_firmwarev < 2.14.02.14.0
dell r630_firmwarev < 2.14.02.14.0
dell c4130_firmwarev < 2.14.02.14.0
dell m630_firmwarev < 2.14.02.14.0
dell m630p_firmwarev < 2.14.02.14.0
dell fc630_firmwarev < 2.14.02.14.0
dell fc430_firmwarev < 2.14.02.14.0
dell m830_firmwarev < 2.14.02.14.0
dell m830p_firmwarev < 2.14.02.14.0
dell fc830_firmwarev < 2.14.02.14.0
dell t630_firmwarev < 2.14.02.14.0
dell r530_firmwarev < 2.14.02.14.0
dell r430_firmwarev < 2.14.02.14.0
dell t430_firmwarev < 2.14.02.14.0
dell r830_firmwarev < 1.14.01.14.0
dell c6320_firmwarev < 2.14.12.14.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.