Threat Investigation
Request a demo

CVE-2022-34403

High

Description

Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.

SeverityHigh
CVSS7.5
Exploit probability—
ProductDell Alienware M15 R6 Firmware
PublishedFeb 1, 2023
First seenFeb 1, 2023
Weakness typeCWE-121CWE-121

How to fix

Update
  • dell alienware_m15_r6_firmware1.17.0 or later
  • dell alienware_m15_r7_firmware1.4.3 or later
  • dell alienware_m15_ryzen_edition_r5_firmware1.8.0 or later
  • dell alienware_m17_r5_amd_firmware1.4.3 or later
  • dell g15_5510_firmware1.16.0 or later
  • dell g15_5511_firmware1.18.0 or later
  • dell g15_5515_firmware1.8.0 or later
  • dell g15_5525_firmware1.4.3 or later
  • dell g5_se_5505_firmware1.13.0 or later
  • dell inspiron_14_5410_2-in-1_firmware2.15.2 or later
  • dell inspiron_15_3511_firmware1.18.2 or later
  • dell inspiron_3195_2-in-1_firmware1.6.0 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
dell alienware_m15_r6_firmwarev < 1.17.01.17.0
dell alienware_m15_r7_firmwarev < 1.4.31.4.3
dell alienware_m15_ryzen_edition_r5_firmwarev < 1.8.01.8.0
dell alienware_m17_r5_amd_firmwarev < 1.4.31.4.3
dell g15_5510_firmwarev < 1.16.01.16.0
dell g15_5511_firmwarev < 1.18.01.18.0
dell g15_5515_firmwarev < 1.8.01.8.0
dell g15_5525_firmwarev < 1.4.31.4.3
dell g5_se_5505_firmwarev < 1.13.01.13.0
dell inspiron_14_5410_2-in-1_firmwarev < 2.15.22.15.2
dell inspiron_15_3511_firmwarev < 1.18.21.18.2
dell inspiron_3195_2-in-1_firmwarev < 1.6.01.6.0
dell inspiron_3275_firmwarev < 1.9.21.9.2
dell inspiron_3475_firmwarev < 1.9.21.9.2
dell inspiron_3505_firmwarev < 1.9.01.9.0
dell inspiron_3515_firmwarev < 1.9.01.9.0
dell inspiron_3525_firmwarev < 1.5.01.5.0
dell inspiron_3585_firmwarev < 1.10.01.10.0
dell inspiron_3595_firmwarev < 1.5.01.5.0
dell inspiron_3785_firmwarev < 1.10.01.10.0
dell inspiron_3891_firmwarev < 1.12.01.12.0
dell inspiron_5310_firmwarev < 2.15.02.15.0
dell inspiron_5405_firmwarev < 1.9.01.9.0
dell inspiron_5410_firmwarev < 2.14.02.14.0
dell inspiron_5415_firmwarev < 1.13.01.13.0
dell inspiron_5425_firmwarev < 1.5.01.5.0
dell inspiron_5485_firmwarev < 2.11.02.11.0
dell inspiron_5485_2-in-1_firmwarev < 2.11.02.11.0
dell inspiron_5505_firmwarev < 1.9.01.9.0
dell inspiron_5510_firmwarev < 2.15.22.15.2
dell inspiron_5515_firmwarev < 1.13.01.13.0
dell inspiron_5585_firmwarev < 2.11.02.11.0
dell inspiron_7405_2-in-1_firmwarev < 1.10.11.10.1
dell inspiron_7415_firmwarev < 1.13.01.13.0
dell inspiron_7425_firmwarev < 1.5.01.5.0
dell inspiron_7510_firmwarev < 1.12.01.12.0
dell inspiron_7610_firmwarev < 1.12.01.12.0
dell latitude_3320_firmwarev < 1.18.21.18.2
dell latitude_3420_firmwarev < 1.23.21.23.2
dell latitude_3520_firmwarev < 1.23.21.23.2
dell latitude_5320_firmwarev < 1.24.31.24.3
dell latitude_5420_firmwarev < 1.22.01.22.0
dell latitude_5520_firmwarev < 1.24.31.24.3
dell latitude_5521_firmwarev < 1.17.31.17.3
dell latitude_7320_firmwarev < 1.20.01.20.0
dell latitude_7320_detachable_firmwarev < 1.17.21.17.2
dell latitude_7420_firmwarev < 1.20.01.20.0
dell latitude_7520_firmwarev < 1.20.01.20.0
dell latitude_9420_firmwarev < 1.16.21.16.2
dell latitude_9520_firmwarev < 1.17.01.17.0
dell latitude_rugged_5430_firmwarev < 1.12.01.12.0
dell latitude_rugged_7330_firmwarev < 1.12.01.12.0
dell latitude_5421_firmwarev < 1.15.01.15.0
dell optiplex_5090_firmwarev < 1.12.01.12.0
dell optiplex_5490_all-in-one_firmwarev < 1.15.01.15.0
dell optiplex_7090_tower_firmwarev < 1.12.01.12.0
dell optiplex_7090_ultra_firmwarev < 1.15.01.15.0
dell optiplex_7090_aio_firmwarev < 1.15.01.15.0
dell precision_3450_firmwarev < 1.12.01.12.0
dell precision_3560_firmwarev < 1.24.31.24.3
dell precision_3561_firmwarev < 1.17.31.17.3
dell precision_3650_tower_firmwarev < 1.16.01.16.0
dell precision_5560_firmwarev < 1.15.21.15.2
dell precision_5760_firmwarev < 1.15.21.15.2
dell precision_7560_firmwarev < 1.16.01.16.0
dell precision_7760_firmwarev < 1.16.01.16.0
dell vostro_3405_firmwarev < 1.9.01.9.0
dell vostro_3425_firmwarev < 1.5.01.5.0
dell vostro_3510_firmwarev < 1.18.21.18.2
dell vostro_3515_firmwarev < 1.9.01.9.0
dell vostro_3525_firmwarev < 1.5.01.5.0
dell vostro_3690_firmwarev < 1.12.01.12.0
dell vostro_3890_firmwarev < 1.12.01.12.0
dell vostro_5310_firmwarev < 2.15.02.15.0
dell vostro_5410_firmwarev < 2.15.22.15.2
dell vostro_5415_firmwarev < 1.13.01.13.0
dell vostro_5510_firmwarev < 2.15.22.15.2
dell vostro_5515_firmwarev < 1.13.01.13.0
dell vostro_5625_firmwarev < 1.5.01.5.0
dell vostro_5890_firmwarev < 1.12.01.12.0
dell vostro_7510_firmwarev < 1.12.01.12.0
dell xps_15_9510_firmwarev < 1.15.21.15.2
dell xps_17_9710_firmwarev < 1.15.21.15.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.