Vulnerabilities > CVE-2022-34401 - Out-of-bounds Write vulnerability in Dell products

047910
CVSS 7.5 - HIGH
Attack vector
LOCAL
Attack complexity
HIGH
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
high complexity
dell
CWE-787

Summary

Dell BIOS contains a stack based buffer overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter in order to gain arbitrary code execution in SMRAM.

Common Weakness Enumeration (CWE)