CVE-2022-34401

Dell / CPG BIOS PUBLISHED

Description (CNA)

Dell BIOS contains a stack based buffer overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter in order to gain arbitrary code execution in SMRAM.

Affected (CNA)

Vendor / product	Versions
Dell / CPG BIOS	affected 1.4.3

CWE

CWE-121

References

https://www.dell.com/support/kbdoc/000204679

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/000204679

CISA-ADP

No English description supplied.

No references supplied.