var-202301-1432
Vulnerability from variot
Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM. Dell Alienware is a line of gaming laptops from the American company Dell. An attacker exploits this vulnerability to send content larger than the specified input length to obtain sensitive information in SMRAM
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202301-1432",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "vostro 3525",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.5.0"
},
{
"model": "inspiron 3785",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.10.0"
},
{
"model": "inspiron 3595",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.5.0"
},
{
"model": "vostro 3405",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.9.0"
},
{
"model": "inspiron 3515",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.9.0"
},
{
"model": "vostro 3515",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.9.0"
},
{
"model": "alienware m17 ryzen edition r5",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.4.3"
},
{
"model": "g15 5515",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.8.0"
},
{
"model": "inspiron 3525",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.5.0"
},
{
"model": "inspiron 3585",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.10.0"
},
{
"model": "alienware m15 ryzen edition r5",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.8.0"
},
{
"model": "vostro 3425",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.5.0"
},
{
"model": "alienware m15 a6",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.4.3"
},
{
"model": "inspiron 3505",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.9.0"
},
{
"model": "g15 5525",
"scope": "lt",
"trust": 1.0,
"vendor": "dell",
"version": "1.4.3"
},
{
"model": "inspiron 3505",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "inspiron 3525",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "inspiron 3595",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "inspiron 3515",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "dell g15 5515",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "alienware m17 ryzen edition r5",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "alienware m15 ryzen edition r5",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "dell g15 5525",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "inspiron 3585",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "alienware m15 a6",
"scope": null,
"trust": 0.8,
"vendor": "\u30c7\u30eb",
"version": null
},
{
"model": "alienware m17 r5 bios",
"scope": "lt",
"trust": 0.6,
"vendor": "dell",
"version": "1.2.2"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"cve": "CVE-2022-34399",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "MULTIPLE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 1.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 2.5,
"id": "CNVD-2023-14510",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "LOW",
"trust": 0.6,
"vectorString": "AV:L/AC:L/Au:M/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 2.3,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"exploitabilityScore": 0.8,
"id": "CVE-2022-34399",
"impactScore": 1.4,
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"author": "security_alert@emc.com",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"exploitabilityScore": 0.8,
"id": "CVE-2022-34399",
"impactScore": 4.2,
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Local",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 2.3,
"baseSeverity": "Low",
"confidentialityImpact": "Low",
"exploitabilityScore": null,
"id": "CVE-2022-34399",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "High",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2022-34399",
"trust": 1.0,
"value": "LOW"
},
{
"author": "security_alert@emc.com",
"id": "CVE-2022-34399",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2022-34399",
"trust": 0.8,
"value": "Low"
},
{
"author": "CNVD",
"id": "CNVD-2023-14510",
"trust": 0.6,
"value": "LOW"
},
{
"author": "CNNVD",
"id": "CNNVD-202301-1450",
"trust": 0.6,
"value": "LOW"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "CNNVD",
"id": "CNNVD-202301-1450"
},
{
"db": "NVD",
"id": "CVE-2022-34399"
},
{
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "\nDell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM. Dell Alienware is a line of gaming laptops from the American company Dell. An attacker exploits this vulnerability to send content larger than the specified input length to obtain sensitive information in SMRAM",
"sources": [
{
"db": "NVD",
"id": "CVE-2022-34399"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"db": "VULMON",
"id": "CVE-2022-34399"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2022-34399",
"trust": 3.9
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2023-14510",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202301-1450",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2022-34399",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"db": "VULMON",
"id": "CVE-2022-34399"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "CNNVD",
"id": "CNNVD-202301-1450"
},
{
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"id": "VAR-202301-1432",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
}
]
},
"last_update_date": "2024-08-14T14:49:21.819000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "DSA-2022-317",
"trust": 0.8,
"url": "https://www.dell.com/support/kbdoc/ja-jp/000205329/dsa-2022-317-dell-client-security-update-for-dell-client-bios"
},
{
"title": "Patch for Dell Alienware m17 R5 BIOS buffer overflow vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/411866"
},
{
"title": "Dell Alienware Buffer error vulnerability fix",
"trust": 0.6,
"url": "http://123.124.177.30/web/xxk/bdxqById.tag?id=222580"
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2022-34399 "
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"db": "VULMON",
"id": "CVE-2022-34399"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "CNNVD",
"id": "CNNVD-202301-1450"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-805",
"trust": 1.0
},
{
"problemtype": "CWE-119",
"trust": 1.0
},
{
"problemtype": "Buffer error (CWE-119) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "https://www.dell.com/support/kbdoc/en-us/000205329/dsa-2022-317-dell-client-security-update-for-dell-client-bios"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-34399"
},
{
"trust": 0.6,
"url": "https://cxsecurity.com/cveshow/cve-2022-34399/"
},
{
"trust": 0.1,
"url": "https://github.com/live-hack-cve/cve-2022-34399"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"db": "VULMON",
"id": "CVE-2022-34399"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "CNNVD",
"id": "CNNVD-202301-1450"
},
{
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"db": "VULMON",
"id": "CVE-2022-34399"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"db": "CNNVD",
"id": "CNNVD-202301-1450"
},
{
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-03-03T00:00:00",
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"date": "2023-01-18T00:00:00",
"db": "VULMON",
"id": "CVE-2022-34399"
},
{
"date": "2023-07-03T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"date": "2023-01-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202301-1450"
},
{
"date": "2023-01-18T12:15:10.297000",
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-03-06T00:00:00",
"db": "CNVD",
"id": "CNVD-2023-14510"
},
{
"date": "2023-01-18T00:00:00",
"db": "VULMON",
"id": "CVE-2022-34399"
},
{
"date": "2023-07-03T01:13:00",
"db": "JVNDB",
"id": "JVNDB-2022-006139"
},
{
"date": "2023-01-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202301-1450"
},
{
"date": "2023-11-07T03:48:36.287000",
"db": "NVD",
"id": "CVE-2022-34399"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202301-1450"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Dell\u00a0Alienware\u00a0m17\u00a0R5\u00a0BIOS\u00a0 Buffer error vulnerability in",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2022-006139"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202301-1450"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.