DSA-2022-169: Dell Client Precision 5820, 7820, and 7920 Tower BIOS Security Update

요약: Dell Client Commercial remediation is available for multiple vulnerabilities that may be exploited by malicious users to compromise the affected system.

이 문서는 다음에 적용됩니다. 이 문서는 다음에 적용되지 않습니다. 이 문서는 특정 제품과 관련이 없습니다. 모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.

영향

High

세부 정보

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE‑2022-32486 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
7.5
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVE-2022-32492 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
7.5

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE‑2022-32486 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
7.5
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVE-2022-32492 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
7.5

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Dell Technologies는 모든 고객이 CVSS 기본 점수와 관련 임시 및 환경 점수를 모두 고려할 것을 권장합니다. 이 경우 특정 보안 취약성과 관련된 잠재적인 심각도에 영향을 미칠 수 있습니다.

영향을 받는 제품 및 문제 해결

See NVD (https://nvd.nist.gov/) for individual scores for each CVE.
 
See the table below for Dell Client BIOS releases containing resolutions to these vulnerabilities. Dell Technologies recommends all customers update at the earliest opportunity.

Go to the Drivers & Downloads site for updates on the applicable products. To learn more, see Dell KB article Dell BIOS Updates, and download the update for your Dell computer.

Customers may use one of the Dell notification solutions to be notified and download driver, BIOS, and firmware updates automatically once available.
 
Product Affected Version Updated Version BIOS Release Date (MM-DD-YYYY)
Precision 5820 Tower Versions before 2.21.0 2.21.0 09-14-2022
Precision 7820 Tower Versions before 2.25.0 2.25.0 09-14-2022
Precision 7920 Tower Versions before 2.25.0 2.25.0 09-14-2022
See NVD (https://nvd.nist.gov/) for individual scores for each CVE.
 
See the table below for Dell Client BIOS releases containing resolutions to these vulnerabilities. Dell Technologies recommends all customers update at the earliest opportunity.

Go to the Drivers & Downloads site for updates on the applicable products. To learn more, see Dell KB article Dell BIOS Updates, and download the update for your Dell computer.

Customers may use one of the Dell notification solutions to be notified and download driver, BIOS, and firmware updates automatically once available.
 
Product Affected Version Updated Version BIOS Release Date (MM-DD-YYYY)
Precision 5820 Tower Versions before 2.21.0 2.21.0 09-14-2022
Precision 7820 Tower Versions before 2.25.0 2.25.0 09-14-2022
Precision 7920 Tower Versions before 2.25.0 2.25.0 09-14-2022

개정 내역

RevisionDateDescription
1.02022-09-22Initial Release

감사의 말

Dell Technologies would like to thank yngweijw for reporting CVE‑2022-32486 and CVE-2022-32492.

관련 정보

해당 제품

Precision 5820 Tower, Precision 7820 Tower, Precision 7920 Tower, Product Security Information
문서 속성
문서 번호: 000202772
문서 유형: Dell Security Advisory
마지막 수정 시간: 22 9월 2022
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.