Skip to content
Sign in
7.5 High

CVE-2022-34398 Dell BIOS contains a Time-of-check Time-of-use vulnerability

Description

Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system.

Affected products and versions

Product Affected versions Fixed in
CPG BIOS 2.15 earliest → 2.15.0 No fix stated

Other CVEs of CPG BIOS

The 110 CVEs of CPG BIOS →
CVE-2024-0158 Dell BIOS contains an improper input validation vulnerability 5.1 Medium CVE-2024-32855 Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component 3.8 Low CVE-2024-32860 Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component 7.5 High CVE-2024-32858 Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component 7.5 High
Track this CVE