CVE-2022-34403

Dell / CPG BIOS PUBLISHED

Description (CNA)

Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM.

Affected (CNA)

Vendor / product	Versions
Dell / CPG BIOS	affected 0 through 2.15.2

CWE

CWE-121

References

https://www.dell.com/support/kbdoc/000205716

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/000205716

CISA-ADP

No English description supplied.

No references supplied.