Improper SMM Communication Buffer Vulnerability in Dell PowerEdge and Precision BIOS
CVE-2022-34415

7.5HIGH

Key Information:

Vendor
Dell
Vendor
CVE Published:
16 March 2023

Summary

Dell PowerEdge BIOS and Dell Precision BIOS are affected by a vulnerability that arises from improper verification of the SMM communication buffer. This flaw can be exploited by a local attacker with high privileges, potentially allowing them to execute arbitrary code or create conditions for a denial of service. It is crucial for users of affected systems to stay vigilant and apply necessary security updates to mitigate potential risks.

Affected Version(s)

PowerEdge Platform 14G,15G

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.