Improper SMM Communication Buffer Vulnerability in Dell PowerEdge and Precision BIOS
CVE-2022-34415
7.5HIGH
Summary
Dell PowerEdge BIOS and Dell Precision BIOS are affected by a vulnerability that arises from improper verification of the SMM communication buffer. This flaw can be exploited by a local attacker with high privileges, potentially allowing them to execute arbitrary code or create conditions for a denial of service. It is crucial for users of affected systems to stay vigilant and apply necessary security updates to mitigate potential risks.
Affected Version(s)
PowerEdge Platform 14G,15G
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved