PT-2022-6198 · Dell · Dell Alienware M17 R5 Bios

Ling_Sec · Published 2022-06-23 · Updated 2023-01-26 · CVE-2022-34399

Positive Technologies (AI Summary)

CVSS v2.0

5.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:C/A:N

Name of the Vulnerable Software and Affected Versions Dell Alienware m17 R5 BIOS versions prior to 1.2.2

Description The issue is related to a buffer access vulnerability in the BIOS software of Dell Alienware m17 R5 laptops. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected, which may lead to leaking certain sections of SMRAM. This could impact the confidentiality and integrity of protected information.

Recommendations For Dell Alienware m17 R5 BIOS versions prior to 1.2.2, update the BIOS to version 1.2.2 or later to resolve the issue. As a temporary workaround, consider restricting admin privileges to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-805

CWE-119

CWE-120

Related Identifiers

BDU:2023-00466

CVE-2022-34399

Affected Products

Dell Alienware M17 R5 Bios

References · 7

• https://dell.com/support/kbdoc/en-us/000205329/dsa-2022-317-dell-client-security-update-for-dell-client-bios · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-34399 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34399 · Security Note
• https://bdu.fstec.ru/vul/2023-00466 · Security Note
• https://vuldb.com/ru/?id.218908 · Note
• https://t.me/cvenotify/42882 · Telegram Post
• https://t.me/cvenotify/42270 · Telegram Post