CVE-2022-34398

Severity: high (CVSS 7.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-01 · updated 2026-06-17
Weakness: CWE-367

Description

Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system.

Affected products

Dell Alienware Area 51M R1 Firmware: before 1.22.2 — fixed in 1.22.2
Dell Alienware Area 51M R2 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Alienware Aurora R10 Firmware: before 2.3.2 — fixed in 2.3.2
Dell Alienware Aurora R11 Firmware: before 1.0.17 — fixed in 1.0.17
Dell Alienware Aurora R12 Firmware: before 1.1.17 — fixed in 1.1.17
Dell Alienware Aurora R13 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Alienware Aurora R8 Firmware: before 1.0.26 — fixed in 1.0.26
Dell Alienware Aurora R9 Firmware: before 1.0.22 — fixed in 1.0.22
Dell Alienware M15 R1 Firmware: before 2.15.0 — fixed in 2.15.0
Dell Alienware M15 R2 Firmware: before 1.18.3 — fixed in 1.18.3
Dell Alienware M15 R3 Firmware: before 1.20.0 — fixed in 1.20.0
Dell Alienware M15 R4 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Alienware M17 R1 Firmware: before 2.15.0 — fixed in 2.15.0
Dell Alienware M17 R2 Firmware: before 1.18.3 — fixed in 1.18.3
Dell Alienware M17 R3 Firmware: before 1.20.0 — fixed in 1.20.0
Dell Alienware M17 R4 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Alienware X14 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Alienware X15 R1 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Alienware X15 R2 Firmware: before 1.8.2 — fixed in 1.8.2
Dell Alienware X17 R1 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Alienware X17 R2 Firmware: before 1.8.2 — fixed in 1.8.2
Dell Aurora R14 Firmware: before 2.5.0 — fixed in 2.5.0
Dell Chengming 3980 Firmware: before 2.26.0 — fixed in 2.26.0
Dell Chengming 3988 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Chengming 3990 Firmware: before 1.16.2 — fixed in 1.16.2
Dell Chengming 3991 Firmware: before 1.16.2 — fixed in 1.16.2
Dell G3 15 3590 Firmware: before 1.19.0 — fixed in 1.19.0
Dell G3 3579 Firmware: before 1.24.0 — fixed in 1.24.0
Dell G3 3779 Firmware: before 1.24.0 — fixed in 1.24.0
Dell G5 15 5590 Firmware: before 1.22.0 — fixed in 1.22.0

How to fix

Upgrade to a fixed version: Dell Alienware Area 51M R1 Firmware 1.22.2; Dell Alienware Area 51M R2 Firmware 1.19.0; Dell Alienware Aurora R10 Firmware 2.3.2; Dell Alienware Aurora R11 Firmware 1.0.17; Dell Alienware Aurora R12 Firmware 1.1.17; Dell Alienware Aurora R13 Firmware 1.7.0; Dell Alienware Aurora R8 Firmware 1.0.26; Dell Alienware Aurora R9 Firmware 1.0.22; Dell Alienware M15 R1 Firmware 2.15.0; Dell Alienware M15 R2 Firmware 1.18.3; Dell Alienware M15 R3 Firmware 1.20.0; Dell Alienware M15 R4 Firmware 1.14.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-34398 or the next vulnerability affects your stack