What’s Vulnerable › Vulnerabilities

CVE-2022-34399

• Severity: low (CVSS 2.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-18 · updated 2026-06-17
• Weakness: CWE-805

Description

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM.

Affected products

• Dell Alienware M15 A6 Firmware: before 1.4.3 — fixed in 1.4.3
• Dell Alienware M15 Ryzen Edition R5 Firmware: before 1.8.0 — fixed in 1.8.0
• Dell Alienware M17 Ryzen Edition R5 Firmware: before 1.4.3 — fixed in 1.4.3
• Dell G15 5515 Firmware: before 1.8.0 — fixed in 1.8.0
• Dell G15 5525 Firmware: before 1.4.3 — fixed in 1.4.3
• Dell Inspiron 3505 Firmware: before 1.9.0 — fixed in 1.9.0
• Dell Inspiron 3515 Firmware: before 1.9.0 — fixed in 1.9.0
• Dell Inspiron 3525 Firmware: before 1.5.0 — fixed in 1.5.0
• Dell Inspiron 3585 Firmware: before 1.10.0 — fixed in 1.10.0
• Dell Inspiron 3595 Firmware: before 1.5.0 — fixed in 1.5.0
• Dell Inspiron 3785 Firmware: before 1.10.0 — fixed in 1.10.0
• Dell Vostro 3405 Firmware: before 1.9.0 — fixed in 1.9.0
• Dell Vostro 3425 Firmware: before 1.5.0 — fixed in 1.5.0
• Dell Vostro 3515 Firmware: before 1.9.0 — fixed in 1.9.0
• Dell Vostro 3525 Firmware: before 1.5.0 — fixed in 1.5.0

How to fix

Upgrade to a fixed version: Dell Alienware M15 A6 Firmware 1.4.3; Dell Alienware M15 Ryzen Edition R5 Firmware 1.8.0; Dell Alienware M17 Ryzen Edition R5 Firmware 1.4.3; Dell G15 5515 Firmware 1.8.0; Dell G15 5525 Firmware 1.4.3; Dell Inspiron 3505 Firmware 1.9.0; Dell Inspiron 3515 Firmware 1.9.0; Dell Inspiron 3525 Firmware 1.5.0; Dell Inspiron 3585 Firmware 1.10.0; Dell Inspiron 3595 Firmware 1.5.0; Dell Inspiron 3785 Firmware 1.10.0; Dell Vostro 3405 Firmware 1.9.0. Check the vendor advisory for mitigations.

References

• https://www.dell.com/support/kbdoc/en-us/000205329/dsa-2022-317-dell-client-security-update-for-dell-client-bios
• https://www.dell.com/support/kbdoc/en-us/000205329/dsa-2022-317-dell-client-security-update-for-dell-client-bios

Get alerted when CVE-2022-34399 or the next vulnerability affects your stack