DSA-2022-015: Dell PowerEdge Improper SMM Communication Buffer Verification Vulnerability
Dell PowerEdge remediation is available for an Improper SMM communication buffer verification vulnerability that may be exploited by malicious users to compromise the affected system.
Samenvatting:Dell PowerEdge remediation is available for an Improper SMM communication buffer verification vulnerability that may be exploited by malicious users to compromise the affected system.
Article content
Impact
Medium
Gegevens
Proprietary Code CVE
Description
CVSS Base Score
CVSS Vector String
CVE-2022-22558
Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker may potentially exploit this vulnerability leading to arbitrary writes or denial of service..
Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker may potentially exploit this vulnerability leading to arbitrary writes or denial of service..
Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.
Note: The table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
*Out of an abundance of caution, version 2.14.x and 1.14.x was removed while Dell investigates issues reported by small number of customers with the BIOS release. Once the issue is resolved, Dell will release an updated BIOS if needed.
Note: The table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
*Out of an abundance of caution, version 2.14.x and 1.14.x was removed while Dell investigates issues reported by small number of customers with the BIOS release. Once the issue is resolved, Dell will release an updated BIOS if needed.
Bevestigingen
Dell would like to thank yngweijw for reporting this issue.
Revisiegeschiedenis
Revision
Date
Description
1.0
2022-03-31
Initial release
1.1
2022-05-31
Updated "Affected Products and Remediation" section
1.2
2022-06-20
Updated Target Release Dates
1.3
2022-07-27
Updated "Affected Products and Remediation" section
1.4
2022-08-04
Updated CVE Description.
1.5
2022-08-22
Added PowerEdge XE8545 to "Affected Products and Remediation" section.
1.6
2022-009-28
Updated "Affected Products and Remediation" section