Ga naar hoofdinhoud
  • Snel en eenvoudig bestellen
  • Bestellingen en de verzendstatus bekijken
  • Een lijst met producten maken en openen
  • Beheer uw Dell EMC locaties, producten en contactpersonen op productniveau met Company Administration.

Artikelnummer: 000202772


DSA-2022-169: Dell Client Precision 5820, 7820, and 7920 Tower BIOS Security Update

Samenvatting: Dell Client Commercial remediation is available for multiple vulnerabilities that may be exploited by malicious users to compromise the affected system.

Article content


Impact

High

Gegevens

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE‑2022-32486 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
7.5
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVE-2022-32492 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
7.5

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE‑2022-32486 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
7.5
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVE-2022-32492 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
7.5

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

See NVD (https://nvd.nist.gov/) for individual scores for each CVE.
 
See the table below for Dell Client BIOS releases containing resolutions to these vulnerabilities. Dell Technologies recommends all customers update at the earliest opportunity.

Go to the Drivers & Downloads site for updates on the applicable products. To learn more, see Dell KB article Dell BIOS Updates, and download the update for your Dell computer.

Customers may use one of the Dell notification solutions to be notified and download driver, BIOS, and firmware updates automatically once available.
 
Product Affected Version Updated Version BIOS Release Date (MM-DD-YYYY)
Precision 5820 Tower Versions before 2.21.0 2.21.0 09-14-2022
Precision 7820 Tower Versions before 2.25.0 2.25.0 09-14-2022
Precision 7920 Tower Versions before 2.25.0 2.25.0 09-14-2022
See NVD (https://nvd.nist.gov/) for individual scores for each CVE.
 
See the table below for Dell Client BIOS releases containing resolutions to these vulnerabilities. Dell Technologies recommends all customers update at the earliest opportunity.

Go to the Drivers & Downloads site for updates on the applicable products. To learn more, see Dell KB article Dell BIOS Updates, and download the update for your Dell computer.

Customers may use one of the Dell notification solutions to be notified and download driver, BIOS, and firmware updates automatically once available.
 
Product Affected Version Updated Version BIOS Release Date (MM-DD-YYYY)
Precision 5820 Tower Versions before 2.21.0 2.21.0 09-14-2022
Precision 7820 Tower Versions before 2.25.0 2.25.0 09-14-2022
Precision 7920 Tower Versions before 2.25.0 2.25.0 09-14-2022

Bevestigingen

Dell Technologies would like to thank yngweijw for reporting CVE‑2022-32486 and CVE-2022-32492.

Revisiegeschiedenis

RevisionDateDescription
1.02022-09-22Initial Release

Verwante informatie

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide


Artikeleigenschappen


Getroffen product

Precision 5820 Tower, Precision 7820 Tower, Precision 7920 Tower, Product Security Information

Datum laatst gepubliceerd

22 sep 2022

Versie

1

Artikeltype

Dell Security Advisory