Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2022-34406: Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulner...

CVE-2022-34406 · published 3 years ago

Summary

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.

What to do

Update dell r6515_firmware to version 2.9.3 or later.
Update dell r7515_firmware to version 2.9.3 or later.
Update dell r6525_firmware to version 2.9.3 or later.
Update dell r7525_firmware to version 2.9.3 or later.
Update dell xe8545_firmware to version 2.9.4 or later.
Update dell r6415_firmware to version 1.19.0 or later.
Update dell r7415_firmware to version 1.19.0 or later.
Update dell r7425_firmware to version 1.19.0 or later.
Update dell r750_firmware to version 1.8.2 or later.
Update dell r750xa_firmware to version 1.8.2 or later.
Update dell r650_firmware to version 1.8.2 or later.
Update dell c6520_firmware to version 1.8.2 or later.
Update dell mx750c_firmware to version 1.8.2 or later.
Update dell r450_firmware to version 1.8.2 or later.
Update dell r550_firmware to version 1.8.2 or later.
Update dell r650xs_firmware to version 1.8.2 or later.
Update dell r750xs_firmware to version 1.8.2 or later.
Update dell t550_firmware to version 1.8.2 or later.
Update dell xr11_firmware to version 1.8.2 or later.
Update dell xr12_firmware to version 1.8.2 or later.
Update dell r250_firmware to version 1.4.2 or later.
Update dell r350_firmware to version 1.4.2 or later.
Update dell t150_firmware to version 1.4.2 or later.
Update dell t350_firmware to version 1.4.2 or later.
Update dell r740_firmware to version 2.16.1 or later.
Update dell r740xd_firmware to version 2.16.1 or later.
Update dell r640_firmware to version 2.16.1 or later.
Update dell r940_firmware to version 2.16.1 or later.
Update dell r540_firmware to version 2.16.1 or later.
Update dell r440_firmware to version 2.16.1 or later.
Update dell t440_firmware to version 2.16.1 or later.
Update dell xr2_firmware to version 2.16.1 or later.
Update dell r740xd2_firmware to version 2.16.1 or later.
Update dell r840_firmware to version 2.16.1 or later.
Update dell r940xa_firmware to version 2.16.1 or later.
Update dell t640_firmware to version 2.16.1 or later.
Update dell c6420_firmware to version 2.16.1 or later.
Update dell fc640_firmware to version 2.16.1 or later.
Update dell m640_firmware to version 2.16.1 or later.
Update dell m640p_firmware to version 2.16.1 or later.
Update dell mx740c_firmware to version 2.16.1 or later.
Update dell mx840c_firmware to version 2.16.1 or later.
Update dell c4140_firmware to version 2.16.1 or later.
Update dell dss8440_firmware to version 2.16.1 or later.
Update dell t140_firmware to version 2.11.1 or later.
Update dell t340_firmware to version 2.11.1 or later.
Update dell r240_firmware to version 2.11.1 or later.
Update dell r340_firmware to version 2.11.1 or later.
Update dell xe2420_firmware to version 2.16.0 or later.
Update dell xe7420_firmware to version 2.16.1 or later.
Update dell xe7440_firmware to version 2.16.1 or later.
Update dell r730_firmware to version 2.16.0 or later.
Update dell r730xd_firmware to version 2.16.0 or later.
Update dell r630_firmware to version 2.16.0 or later.
Update dell c4130_firmware to version 2.16.0 or later.
Update dell r930_firmware to version 2.16.0 or later.
Update dell m630_firmware to version 2.16.0 or later.
Update dell m630p_firmware to version 2.16.0 or later.
Update dell fc630_firmware to version 2.16.0 or later.
Update dell fc430_firmware to version 2.16.0 or later.
Update dell m830_firmware to version 2.16.0 or later.
Update dell m830p_firmware to version 2.16.0 or later.
Update dell fc830_firmware to version 2.16.0 or later.
Update dell t630_firmware to version 2.16.0 or later.
Update dell r530_firmware to version 2.16.0 or later.
Update dell r430_firmware to version 2.16.0 or later.
Update dell t430_firmware to version 2.16.0 or later.
Update dell r830_firmware to version 1.16.0 or later.
Update dell c6320_firmware to version 2.16.0 or later.
Update dell t130_firmware to version 2.16.0 or later.
Update dell r230_firmware to version 2.16.0 or later.
Update dell t330_firmware to version 2.16.0 or later.
Update dell r330_firmware to version 2.16.0 or later.
Update dell nx430_firmware to version 2.16.0 or later.
Update dell nx3230_firmware to version 2.16.0 or later.
Update dell nx3330_firmware to version 2.16.0 or later.
Update dell nx440_firmware to version 2.11.1 or later.
Update dell nx3240_firmware to version 2.16.1 or later.
Update dell nx3340_firmware to version 2.16.1 or later.

Affected software

Vendor	Product	Affected versions
dell	r6515_firmware	< 2.9.3 `cpe:2.3:o:dell:r6515_firmware::::::::`
dell	r7515_firmware	< 2.9.3 `cpe:2.3:o:dell:r7515_firmware::::::::`
dell	r6525_firmware	< 2.9.3 `cpe:2.3:o:dell:r6525_firmware::::::::`
dell	r7525_firmware	< 2.9.3 `cpe:2.3:o:dell:r7525_firmware::::::::`
dell	xe8545_firmware	< 2.9.4 `cpe:2.3:o:dell:xe8545_firmware::::::::`
dell	c6525_firmware	All versions `cpe:2.3:o:dell:c6525_firmware::::::::`
dell	r6415_firmware	< 1.19.0 `cpe:2.3:o:dell:r6415_firmware::::::::`
dell	r7415_firmware	< 1.19.0 `cpe:2.3:o:dell:r7415_firmware::::::::`
dell	r7425_firmware	< 1.19.0 `cpe:2.3:o:dell:r7425_firmware::::::::`
dell	r750_firmware	< 1.8.2 `cpe:2.3:o:dell:r750_firmware::::::::`
dell	r750xa_firmware	< 1.8.2 `cpe:2.3:o:dell:r750xa_firmware::::::::`
dell	r650_firmware	< 1.8.2 `cpe:2.3:o:dell:r650_firmware::::::::`
dell	c6520_firmware	< 1.8.2 `cpe:2.3:o:dell:c6520_firmware::::::::`
dell	mx750c_firmware	< 1.8.2 `cpe:2.3:o:dell:mx750c_firmware::::::::`
dell	r450_firmware	< 1.8.2 `cpe:2.3:o:dell:r450_firmware::::::::`
dell	r550_firmware	< 1.8.2 `cpe:2.3:o:dell:r550_firmware::::::::`
dell	r650xs_firmware	< 1.8.2 `cpe:2.3:o:dell:r650xs_firmware::::::::`
dell	r750xs_firmware	< 1.8.2 `cpe:2.3:o:dell:r750xs_firmware::::::::`
dell	t550_firmware	< 1.8.2 `cpe:2.3:o:dell:t550_firmware::::::::`
dell	xr11_firmware	< 1.8.2 `cpe:2.3:o:dell:xr11_firmware::::::::`
dell	xr12_firmware	< 1.8.2 `cpe:2.3:o:dell:xr12_firmware::::::::`
dell	r250_firmware	< 1.4.2 `cpe:2.3:o:dell:r250_firmware::::::::`
dell	r350_firmware	< 1.4.2 `cpe:2.3:o:dell:r350_firmware::::::::`
dell	t150_firmware	< 1.4.2 `cpe:2.3:o:dell:t150_firmware::::::::`
dell	t350_firmware	< 1.4.2 `cpe:2.3:o:dell:t350_firmware::::::::`
dell	r740_firmware	< 2.16.1 `cpe:2.3:o:dell:r740_firmware::::::::`
dell	r740xd_firmware	< 2.16.1 `cpe:2.3:o:dell:r740xd_firmware::::::::`
dell	r640_firmware	< 2.16.1 `cpe:2.3:o:dell:r640_firmware::::::::`
dell	r940_firmware	< 2.16.1 `cpe:2.3:o:dell:r940_firmware::::::::`
dell	r540_firmware	< 2.16.1 `cpe:2.3:o:dell:r540_firmware::::::::`
dell	r440_firmware	< 2.16.1 `cpe:2.3:o:dell:r440_firmware::::::::`
dell	t440_firmware	< 2.16.1 `cpe:2.3:o:dell:t440_firmware::::::::`
dell	xr2_firmware	< 2.16.1 `cpe:2.3:o:dell:xr2_firmware::::::::`
dell	r740xd2_firmware	< 2.16.1 `cpe:2.3:o:dell:r740xd2_firmware::::::::`
dell	r840_firmware	< 2.16.1 `cpe:2.3:o:dell:r840_firmware::::::::`
dell	r940xa_firmware	< 2.16.1 `cpe:2.3:o:dell:r940xa_firmware::::::::`
dell	t640_firmware	< 2.16.1 `cpe:2.3:o:dell:t640_firmware::::::::`
dell	c6420_firmware	< 2.16.1 `cpe:2.3:o:dell:c6420_firmware::::::::`
dell	fc640_firmware	< 2.16.1 `cpe:2.3:o:dell:fc640_firmware::::::::`
dell	m640_firmware	< 2.16.1 `cpe:2.3:o:dell:m640_firmware::::::::`
dell	m640p_firmware	< 2.16.1 `cpe:2.3:o:dell:m640p_firmware::::::::`
dell	mx740c_firmware	< 2.16.1 `cpe:2.3:o:dell:mx740c_firmware::::::::`
dell	mx840c_firmware	< 2.16.1 `cpe:2.3:o:dell:mx840c_firmware::::::::`
dell	c4140_firmware	< 2.16.1 `cpe:2.3:o:dell:c4140_firmware::::::::`
dell	dss8440_firmware	< 2.16.1 `cpe:2.3:o:dell:dss8440_firmware::::::::`
dell	t140_firmware	< 2.11.1 `cpe:2.3:o:dell:t140_firmware::::::::`
dell	t340_firmware	< 2.11.1 `cpe:2.3:o:dell:t340_firmware::::::::`
dell	r240_firmware	< 2.11.1 `cpe:2.3:o:dell:r240_firmware::::::::`
dell	r340_firmware	< 2.11.1 `cpe:2.3:o:dell:r340_firmware::::::::`
dell	xe2420_firmware	< 2.16.0 `cpe:2.3:o:dell:xe2420_firmware::::::::`

Showing 50 of 80. Show the rest

Vendor	Product	Affected versions
dell	xe7420_firmware	< 2.16.1 `cpe:2.3:o:dell:xe7420_firmware::::::::`
dell	xe7440_firmware	< 2.16.1 `cpe:2.3:o:dell:xe7440_firmware::::::::`
dell	r730_firmware	< 2.16.0 `cpe:2.3:o:dell:r730_firmware::::::::`
dell	r730xd_firmware	< 2.16.0 `cpe:2.3:o:dell:r730xd_firmware::::::::`
dell	r630_firmware	< 2.16.0 `cpe:2.3:o:dell:r630_firmware::::::::`
dell	c4130_firmware	< 2.16.0 `cpe:2.3:o:dell:c4130_firmware::::::::`
dell	r930_firmware	< 2.16.0 `cpe:2.3:o:dell:r930_firmware::::::::`
dell	m630_firmware	< 2.16.0 `cpe:2.3:o:dell:m630_firmware::::::::`
dell	m630p_firmware	< 2.16.0 `cpe:2.3:o:dell:m630p_firmware::::::::`
dell	fc630_firmware	< 2.16.0 `cpe:2.3:o:dell:fc630_firmware::::::::`
dell	fc430_firmware	< 2.16.0 `cpe:2.3:o:dell:fc430_firmware::::::::`
dell	m830_firmware	< 2.16.0 `cpe:2.3:o:dell:m830_firmware::::::::`
dell	m830p_firmware	< 2.16.0 `cpe:2.3:o:dell:m830p_firmware::::::::`
dell	fc830_firmware	< 2.16.0 `cpe:2.3:o:dell:fc830_firmware::::::::`
dell	t630_firmware	< 2.16.0 `cpe:2.3:o:dell:t630_firmware::::::::`
dell	r530_firmware	< 2.16.0 `cpe:2.3:o:dell:r530_firmware::::::::`
dell	r430_firmware	< 2.16.0 `cpe:2.3:o:dell:r430_firmware::::::::`
dell	t430_firmware	< 2.16.0 `cpe:2.3:o:dell:t430_firmware::::::::`
dell	r830_firmware	< 1.16.0 `cpe:2.3:o:dell:r830_firmware::::::::`
dell	c6320_firmware	< 2.16.0 `cpe:2.3:o:dell:c6320_firmware::::::::`
dell	t130_firmware	< 2.16.0 `cpe:2.3:o:dell:t130_firmware::::::::`
dell	r230_firmware	< 2.16.0 `cpe:2.3:o:dell:r230_firmware::::::::`
dell	t330_firmware	< 2.16.0 `cpe:2.3:o:dell:t330_firmware::::::::`
dell	r330_firmware	< 2.16.0 `cpe:2.3:o:dell:r330_firmware::::::::`
dell	nx430_firmware	< 2.16.0 `cpe:2.3:o:dell:nx430_firmware::::::::`
dell	nx3230_firmware	< 2.16.0 `cpe:2.3:o:dell:nx3230_firmware::::::::`
dell	nx3330_firmware	< 2.16.0 `cpe:2.3:o:dell:nx3330_firmware::::::::`
dell	nx440_firmware	< 2.11.1 `cpe:2.3:o:dell:nx440_firmware::::::::`
dell	nx3240_firmware	< 2.16.1 `cpe:2.3:o:dell:nx3240_firmware::::::::`
dell	nx3340_firmware	< 2.16.1 `cpe:2.3:o:dell:nx3340_firmware::::::::`

Original advisory text

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulner...

References

https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-i... Patch Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

6.7 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-119Buffer Overflow

Timeline

Published16 Mar 2023

Updated26 Oct 2026

First seen29 Sep 2026

Sources

CVE-2022-34406 · NVD

Track software like this

Free during beta