DSA-2022-278: Dell Client Security Update for Dell Client BIOS
요약: Dell Client Consumer and Commercial platform remediation is available for these vulnerabilities that could exploited by malicious users to compromise the affected system(s).
이 문서는 다음에 적용됩니다.
이 문서는 다음에 적용되지 않습니다.
이 문서는 특정 제품과 관련이 없습니다.
모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.
영향
High
세부 정보
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-34393 | Prior Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. | 7.5 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
| CVE-2022-34460 | Prior Dell BIOS versions contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. | 7.5 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
See the table below for Dell Client BIOS releases containing resolutions to these vulnerabilities. Dell recommends all customers update at the earliest opportunity.
Go to the Drivers and Downloads site for updates on the applicable products. To learn more, see Dell KB article Dell BIOS Updates, and download the update for your Dell computer.
Customers may use one of the Dell notification solutions to be notified and download driver, BIOS, and firmware updates automatically once available.
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-34393 | Prior Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. | 7.5 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
| CVE-2022-34460 | Prior Dell BIOS versions contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. | 7.5 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
See the table below for Dell Client BIOS releases containing resolutions to these vulnerabilities. Dell recommends all customers update at the earliest opportunity.
Go to the Drivers and Downloads site for updates on the applicable products. To learn more, see Dell KB article Dell BIOS Updates, and download the update for your Dell computer.
Customers may use one of the Dell notification solutions to be notified and download driver, BIOS, and firmware updates automatically once available.
영향을 받는 제품 및 문제 해결
| Product | BIOS Update Version | BIOS Release Date (MM/DD/YYYY) |
| Dell G5 SE 5505 | 1.12.1 | 9/27/2022 |
| Inspiron 27 7775 | 2.17.0 | 8/9/2022 |
| Inspiron 3180 | 1.5.0 | 8/12/2022 |
| Inspiron 3185 | 1.5.0 | 8/12/2022 |
| Inspiron 3195 2-in-1 | 1.5.0 | 8/11/2022 |
| Inspiron 3275 | 1.9.1 | 8/2/2022 |
| Inspiron 3475 | 1.9.1 | 8/2/2022 |
| Inspiron 3505 | 1.8.0 | 8/9/2022 |
| Inspiron 3515 | 1.7.0 | 8/9/2022 |
| Inspiron 3585 | 1.9.0 | 8/29/2022 |
| Inspiron 3595 | 1.4.0 | 8/9/2022 |
| Inspiron 3785 | 1.9.0 | 8/29/2022 |
| Inspiron 5405 | 1.8.1 | 9/26/2022 |
| Inspiron 5415 | 1.12.0 | 9/14/2022 |
| Inspiron 5485 | 2.10.1 | 9/20/2022 |
| Inspiron 5485 2-in-1 | 2.10.1 | 9/20/2022 |
| Inspiron 5505 | 1.8.1 | 9/26/2022 |
| Inspiron 5515 | 1.12.0 | 9/14/2022 |
| Inspiron 5585 | 2.10.1 | 9/20/2022 |
| Inspiron 7375 | 1.9.0 | 10/4/2022 |
| Inspiron 7405 2-in-1 | 1.9.1 | 9/26/2022 |
| Inspiron 7415 | 1.12.0 | 9/14/2022 |
| Vostro 3405 | 1.8.0 | 8/9/2022 |
| Vostro 3515 | 1.7.0 | 8/9/2022 |
| Vostro 5415 | 1.12.0 | 9/14/2022 |
| Vostro 5515 | 1.12.0 | 9/14/2022 |
| Product | BIOS Update Version | BIOS Release Date (MM/DD/YYYY) |
| Dell G5 SE 5505 | 1.12.1 | 9/27/2022 |
| Inspiron 27 7775 | 2.17.0 | 8/9/2022 |
| Inspiron 3180 | 1.5.0 | 8/12/2022 |
| Inspiron 3185 | 1.5.0 | 8/12/2022 |
| Inspiron 3195 2-in-1 | 1.5.0 | 8/11/2022 |
| Inspiron 3275 | 1.9.1 | 8/2/2022 |
| Inspiron 3475 | 1.9.1 | 8/2/2022 |
| Inspiron 3505 | 1.8.0 | 8/9/2022 |
| Inspiron 3515 | 1.7.0 | 8/9/2022 |
| Inspiron 3585 | 1.9.0 | 8/29/2022 |
| Inspiron 3595 | 1.4.0 | 8/9/2022 |
| Inspiron 3785 | 1.9.0 | 8/29/2022 |
| Inspiron 5405 | 1.8.1 | 9/26/2022 |
| Inspiron 5415 | 1.12.0 | 9/14/2022 |
| Inspiron 5485 | 2.10.1 | 9/20/2022 |
| Inspiron 5485 2-in-1 | 2.10.1 | 9/20/2022 |
| Inspiron 5505 | 1.8.1 | 9/26/2022 |
| Inspiron 5515 | 1.12.0 | 9/14/2022 |
| Inspiron 5585 | 2.10.1 | 9/20/2022 |
| Inspiron 7375 | 1.9.0 | 10/4/2022 |
| Inspiron 7405 2-in-1 | 1.9.1 | 9/26/2022 |
| Inspiron 7415 | 1.12.0 | 9/14/2022 |
| Vostro 3405 | 1.8.0 | 8/9/2022 |
| Vostro 3515 | 1.7.0 | 8/9/2022 |
| Vostro 5415 | 1.12.0 | 9/14/2022 |
| Vostro 5515 | 1.12.0 | 9/14/2022 |
해결 방법 및 완화 방안
None.
개정 내역
| Revision | Date | Description |
| 1.0 | 2022/10/27 | Initial Release |
감사의 말
Dell Technologies would like to thank Jiawei Yin (Yngweijw) for reporting CVE-2022-34393 and CVE-2022-34460.
관련 정보
법적 고지 사항
해당 제품
Inspiron, G Series, G Series, Inspiron, 3000 Series, 5000 Series, 7000 Series, Vostro, 3000 Series, 5000 Series, Product Security Information문서 속성
문서 번호: 000204686
문서 유형: Dell Security Advisory
마지막 수정 시간: 27 10월 2022
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.