VAR-202301-1432
Vulnerability from variot - Updated: 2024-08-14 14:49Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM. Dell Alienware is a line of gaming laptops from the American company Dell. An attacker exploits this vulnerability to send content larger than the specified input length to obtain sensitive information in SMRAM
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202301-1432",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "vostro 3525",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.5.0"
},
{
"model": "inspiron 3785",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.10.0"
},
{
"model": "inspiron 3595",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.5.0"
},
{
"model": "vostro 3405",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.9.0"
},
{
"model": "inspiron 3515",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.9.0"
},
{
"model": "vostro 3515",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.9.0"
},
{
"model": "alienware m17 ryzen edition r5",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.4.3"
},
{
"model": "g15 5515",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.8.0"
},
{
"model": "inspiron 3525",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.5.0"
},
{
"model": "inspiron 3585",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.10.0"
},
{
"model": "alienware m15 ryzen edition r5",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.8.0"
},
{
"model": "vostro 3425",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.5.0"
},
{
"model": "alienware m15 a6",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.4.3"
},
{
"model": "inspiron 3505",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.9.0"
},
{
"model": "g15 5525",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.4.3"
},
{
"model": "inspiron 3505",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "inspiron 3525",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "inspiron 3595",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "inspiron 3515",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "dell g15 5515",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "alienware m17 ryzen edition r5",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "alienware m15 ryzen edition r5",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "dell g15 5525",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "inspiron 3585",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "alienware m15 a6",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "alienware m17 r5 bios",
"scope": "lt",
"trust": 0.6,
"vendor": "dell",
"version": "1.2.2"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"cve": "CVE-2022-34399",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "MULTIPLE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 1.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 2.5,
"id": "CNVD-2023-14510",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "LOW",
"trust": 0.6,
"vectorString": "AV:L/AC:L/Au:M/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 2.3,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"exploitabilityScore": 0.8,
"id": "CVE-2022-34399",
"impactScore": 1.4,
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"author": "security_alert@emc.com",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"exploitabilityScore": 0.8,
"id": "CVE-2022-34399",
"impactScore": 4.2,
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Local",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 2.3,
"baseSeverity": "Low",
"confidentialityImpact": "Low",
"exploitabilityScore": null,
"id": "CVE-2022-34399",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "High",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2022-34399",
"trust": 1.0,
"value": "LOW"
},
{
"author": "security_alert@emc.com",
"id": "CVE-2022-34399",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2022-34399",
"trust": 0.8,
"value": "Low"
},
{
"author": "CNVD",
"id": "CNVD-2023-14510",
"trust": 0.6,
"value": "LOW"
},
{
"author": "CNNVD",
"id": "CNNVD-202301-1450",
"trust": 0.6,
"value": "LOW"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "CNNVD",
"id": "CNNVD-202301-1450"
},
{
"db": "NVD",
"id": "CVE-2022-34399"
},
{
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "\nDell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM. Dell Alienware is a line of gaming laptops from the American company Dell. An attacker exploits this vulnerability to send content larger than the specified input length to obtain sensitive information in SMRAM",
"sources": [
{
"db": "NVD",
"id": "CVE-2022-34399"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"db": "VULMON",
"id": "CVE-2022-34399"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2022-34399",
"trust": 3.9
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2023-14510",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202301-1450",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2022-34399",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"db": "VULMON",
"id": "CVE-2022-34399"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "CNNVD",
"id": "CNNVD-202301-1450"
},
{
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"id": "VAR-202301-1432",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
}
]
},
"last_update_date": "2024-08-14T14:49:21.819000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "DSA-2022-317",
"trust": 0.8,
"url": "https://www.dell.com/support/kbdoc/ja-jp/000205329/dsa-2022-317-dell-client-security-update-for-dell-client-bios"
},
{
"title": "Patch for Dell Alienware m17 R5 BIOS buffer overflow vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/411866"
},
{
"title": "Dell Alienware Buffer error vulnerability fix",
"trust": 0.6,
"url": "http://123.124.177.30/web/xxk/bdxqById.tag?id=222580"
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2022-34399 "
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"db": "VULMON",
"id": "CVE-2022-34399"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "CNNVD",
"id": "CNNVD-202301-1450"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-805",
"trust": 1.0
},
{
"problemtype": "CWE-119",
"trust": 1.0
},
{
"problemtype": "Buffer error (CWE-119) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "https://www.dell.com/support/kbdoc/en-us/000205329/dsa-2022-317-dell-client-security-update-for-dell-client-bios"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-34399"
},
{
"trust": 0.6,
"url": "https://cxsecurity.com/cveshow/cve-2022-34399/"
},
{
"trust": 0.1,
"url": "https://github.com/live-hack-cve/cve-2022-34399"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"db": "VULMON",
"id": "CVE-2022-34399"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "CNNVD",
"id": "CNNVD-202301-1450"
},
{
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"db": "VULMON",
"id": "CVE-2022-34399"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "CNNVD",
"id": "CNNVD-202301-1450"
},
{
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-03-03T00:00:00",
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"date": "2023-01-18T00:00:00",
"db": "VULMON",
"id": "CVE-2022-34399"
},
{
"date": "2023-07-03T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"date": "2023-01-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202301-1450"
},
{
"date": "2023-01-18T12:15:10.297000",
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-03-06T00:00:00",
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"date": "2023-01-18T00:00:00",
"db": "VULMON",
"id": "CVE-2022-34399"
},
{
"date": "2023-07-03T01:13:00",
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"date": "2023-01-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202301-1450"
},
{
"date": "2023-11-07T03:48:36.287000",
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202301-1450"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Dell\u00a0Alienware\u00a0m17\u00a0R5\u00a0BIOS\u00a0 Buffer error vulnerability in",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202301-1450"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…