CVE-2022-34391

Dell / CPG BIOS PUBLISHED

Description (CNA)

Dell Client BIOS Versions prior to the remediated version contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Affected (CNA)

Vendor / product	Versions
Dell / CPG BIOS	affected unspecified before 1.2.15

CWE

CWE-119

References

https://www.dell.com/support/kbdoc/000203882

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/000203882

CISA-ADP

No English description supplied.

No references supplied.