1. Home
  2. CVE Database
  3. CVE-2022-34399
MEDIUM · 5.1

CVE-2022-34399

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger th...

Vulnerability Description

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM.

CVSS Score

5.1

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
DellAlienware M15 A6 Firmware< 1.4.3
DellAlienware M15 A6-
DellAlienware M15 Ryzen Edition R5 Firmware< 1.8.0
DellAlienware M15 Ryzen Edition R5-
DellAlienware M17 Ryzen Edition R5 Firmware< 1.4.3
DellAlienware M17 Ryzen Edition R5-
DellG15 5515 Firmware< 1.8.0
DellG15 5515-
DellG15 5525 Firmware< 1.4.3
DellG15 5525-
DellInspiron 3505 Firmware< 1.9.0
DellInspiron 3505-
DellInspiron 3515 Firmware< 1.9.0
DellInspiron 3515-
DellInspiron 3525 Firmware< 1.5.0
DellInspiron 3525-
DellInspiron 3585 Firmware< 1.10.0
DellInspiron 3585-
DellInspiron 3595 Firmware< 1.5.0
DellInspiron 3595-

Related Weaknesses (CWE)

CWE-119CWE-805

References

FAQ

What is CVE-2022-34399?

CVE-2022-34399 is a vulnerability with a CVSS score of 5.1 (MEDIUM). Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger th...

How severe is CVE-2022-34399?

CVE-2022-34399 has been rated MEDIUM with a CVSS base score of 5.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-34399?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Alienware M15 A6 Firmware, Dell Alienware M15 A6, Dell Alienware M15 Ryzen Edition R5 Firmware, Dell Alienware M15 Ryzen Edition R5, Dell Alienware M17 Ryzen Edition R5 Firmware.