Artikelnummer: 000206038
High
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-34398 | Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system. See also additional details in CERT/CC Vulnerability Note VU#434994. |
7.5 | CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-34398 | Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system. See also additional details in CERT/CC Vulnerability Note VU#434994. |
7.5 | CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H |
| Product | BIOS Update Version | BIOS Release Date (MM-DD-YYYY) Expected Release (Month YYYY) |
| Alienware Area 51m R1 | 1.22.2 | 10/25/2022 |
| Alienware Area 51m R2 | 1.19.0 | 10/11/2022 |
| Alienware Aurora R10 | 2.3.2 | 10/11/2022 |
| Alienware Aurora R11 | 1.0.17 | 10/11/2022 |
| Alienware Aurora R12 | 1.1.17 | 10/11/2022 |
| Alienware Aurora R13 | 1.7.0 | 10/10/2022 |
| Alienware Aurora R8 | 1.0.26 | 12/12/2022 |
| Alienware Aurora R9 | 1.0.22 | 10/17/2022 |
| Alienware m15 R1 | 2.15.0 | 10/6/2022 |
| Alienware m15 R2 | 1.18.3 | 10/27/2022 |
| Alienware m15 R3 | 1.20.0 | 10/11/2022 |
| Alienware m15 R4 | 1.14.0 | 10/11/2022 |
| Alienware m17 R1 | 2.15.0 | 10/6/2022 |
| Alienware m17 R2 | 1.18.3 | 10/27/2022 |
| Alienware m17 R3 | 1.20.0 | 10/11/2022 |
| Alienware m17 R4 | 1.14.0 | 10/11/2022 |
| Alienware x14 | 1.7.0 | 10/11/2022 |
| Alienware x15 R1 | 1.14.0 | 10/22/2022 |
| Alienware x15 R2 | 1.8.2 | 10/9/2022 |
| Alienware x17 R1 | 1.14.0 | 10/22/2022 |
| Alienware x17 R2 | 1.8.2 | 10/9/2022 |
| Aurora R14 | 2.5.0 | 10/11/2022 |
| ChengMing 3980 | 2.26.0 | 12/21/2022 |
| ChengMing 3988 | 1.13.0 | 12/19/2022 |
| ChengMing 3990 | 1.16.2 | 12/12/2022 |
| ChengMing 3991 | 1.16.2 | 12/12/2022 |
| Dell G3 15 3590 | 1.19.0 | 10/4/2022 |
| Dell G3 3579 | 1.24.0 | 12/14/2022 |
| Dell G3 3779 | 1.24.0 | 12/14/2022 |
| Dell G5 15 5590 | 1.22.0 | 12/12/2022 |
| Dell G5 5000 | 1.11.0 | 10/11/2022 |
| Dell G5 5090 | 1.17.0 | 12/12/2022 |
| Dell G7 15 7590 | 1.22.0 | 12/12/2022 |
| Dell G7 17 7790 | 1.22.0 | 12/12/2022 |
| Dell Latitude 3480 | 1.23.0 | 12/21/2022 |
| Dell Latitude 3580 | 1.23.0 | 12/21/2022 |
| Edge Gateway 3000 series | 1.10.0 | 10/5/2022 |
| Edge Gateway 5000 | 1.20.0 | 10/5/2022 |
| Embedded Box PC 3000 | 1.16.0 | 10/11/2022 |
| Embedded Box PC 5000 | 1.18.0 | 12/13/2022 |
| Inspiron 3280 | 1.17.2 | 12/12/2022 |
| Inspiron 3470 | 2.26.0 | 12/21/2022 |
| Inspiron 3471 | 1.13.0 | 12/19/2022 |
| Inspiron 3480 | 1.21.0 | 10/26/2022 |
| Inspiron 3481 | 1.20.0 | 12/13/2022 |
| Inspiron 3482 | 1.17.0 | 12/13/2022 |
| Inspiron 3502 | 1.10.1 | 10/17/2022 |
| Inspiron 3510 | 1.11.1 | 10/14/2022 |
| Inspiron 3521 | 1.6.1 | 10/14/2022 |
| Inspiron 3580 | 1.21.0 | 10/26/2022 |
| Inspiron 3583 | 1.21.0 | 10/26/2022 |
| Inspiron 3581 | 1.20.0 | 12/13/2022 |
| Inspiron 3584 | 1.20.0 | 12/13/2022 |
| Inspiron 3582 | 1.17.0 | 12/13/2022 |
| Inspiron 3670 | 2.26.0 | 12/21/2022 |
| Inspiron 3671 | 1.13.0 | 12/19/2022 |
| Inspiron 3780 | 1.21.0 | 10/26/2022 |
| Inspiron 3781 | 1.20.0 | 12/13/2022 |
| Inspiron 3782 | 1.17.0 | 12/13/2022 |
| Inspiron 3880 | 1.16.2 | 12/12/2022 |
| Inspiron 3881 | 1.16.0 | 10/12/2022 |
| Product | BIOS Update Version | BIOS Release Date (MM-DD-YYYY) Expected Release (Month YYYY) |
| Alienware Area 51m R1 | 1.22.2 | 10/25/2022 |
| Alienware Area 51m R2 | 1.19.0 | 10/11/2022 |
| Alienware Aurora R10 | 2.3.2 | 10/11/2022 |
| Alienware Aurora R11 | 1.0.17 | 10/11/2022 |
| Alienware Aurora R12 | 1.1.17 | 10/11/2022 |
| Alienware Aurora R13 | 1.7.0 | 10/10/2022 |
| Alienware Aurora R8 | 1.0.26 | 12/12/2022 |
| Alienware Aurora R9 | 1.0.22 | 10/17/2022 |
| Alienware m15 R1 | 2.15.0 | 10/6/2022 |
| Alienware m15 R2 | 1.18.3 | 10/27/2022 |
| Alienware m15 R3 | 1.20.0 | 10/11/2022 |
| Alienware m15 R4 | 1.14.0 | 10/11/2022 |
| Alienware m17 R1 | 2.15.0 | 10/6/2022 |
| Alienware m17 R2 | 1.18.3 | 10/27/2022 |
| Alienware m17 R3 | 1.20.0 | 10/11/2022 |
| Alienware m17 R4 | 1.14.0 | 10/11/2022 |
| Alienware x14 | 1.7.0 | 10/11/2022 |
| Alienware x15 R1 | 1.14.0 | 10/22/2022 |
| Alienware x15 R2 | 1.8.2 | 10/9/2022 |
| Alienware x17 R1 | 1.14.0 | 10/22/2022 |
| Alienware x17 R2 | 1.8.2 | 10/9/2022 |
| Aurora R14 | 2.5.0 | 10/11/2022 |
| ChengMing 3980 | 2.26.0 | 12/21/2022 |
| ChengMing 3988 | 1.13.0 | 12/19/2022 |
| ChengMing 3990 | 1.16.2 | 12/12/2022 |
| ChengMing 3991 | 1.16.2 | 12/12/2022 |
| Dell G3 15 3590 | 1.19.0 | 10/4/2022 |
| Dell G3 3579 | 1.24.0 | 12/14/2022 |
| Dell G3 3779 | 1.24.0 | 12/14/2022 |
| Dell G5 15 5590 | 1.22.0 | 12/12/2022 |
| Dell G5 5000 | 1.11.0 | 10/11/2022 |
| Dell G5 5090 | 1.17.0 | 12/12/2022 |
| Dell G7 15 7590 | 1.22.0 | 12/12/2022 |
| Dell G7 17 7790 | 1.22.0 | 12/12/2022 |
| Dell Latitude 3480 | 1.23.0 | 12/21/2022 |
| Dell Latitude 3580 | 1.23.0 | 12/21/2022 |
| Edge Gateway 3000 series | 1.10.0 | 10/5/2022 |
| Edge Gateway 5000 | 1.20.0 | 10/5/2022 |
| Embedded Box PC 3000 | 1.16.0 | 10/11/2022 |
| Embedded Box PC 5000 | 1.18.0 | 12/13/2022 |
| Inspiron 3280 | 1.17.2 | 12/12/2022 |
| Inspiron 3470 | 2.26.0 | 12/21/2022 |
| Inspiron 3471 | 1.13.0 | 12/19/2022 |
| Inspiron 3480 | 1.21.0 | 10/26/2022 |
| Inspiron 3481 | 1.20.0 | 12/13/2022 |
| Inspiron 3482 | 1.17.0 | 12/13/2022 |
| Inspiron 3502 | 1.10.1 | 10/17/2022 |
| Inspiron 3510 | 1.11.1 | 10/14/2022 |
| Inspiron 3521 | 1.6.1 | 10/14/2022 |
| Inspiron 3580 | 1.21.0 | 10/26/2022 |
| Inspiron 3583 | 1.21.0 | 10/26/2022 |
| Inspiron 3581 | 1.20.0 | 12/13/2022 |
| Inspiron 3584 | 1.20.0 | 12/13/2022 |
| Inspiron 3582 | 1.17.0 | 12/13/2022 |
| Inspiron 3670 | 2.26.0 | 12/21/2022 |
| Inspiron 3671 | 1.13.0 | 12/19/2022 |
| Inspiron 3780 | 1.21.0 | 10/26/2022 |
| Inspiron 3781 | 1.20.0 | 12/13/2022 |
| Inspiron 3782 | 1.17.0 | 12/13/2022 |
| Inspiron 3880 | 1.16.2 | 12/12/2022 |
| Inspiron 3881 | 1.16.0 | 10/12/2022 |
CVE-2022-34398: Dell would like to thank the Intel iStare researchers Jonathan Lusky and Benny Zeltser, who discovered and reported this vulnerability.
| Revision | Date | Description |
| 1.0 | 2022-12-20 | Initial Release |
| 1.1 | 2023-01-18 | Updated BIOS Release Dates |
| 1.2 | 2023-02-02 | Final BIOS Release Date Updates |
Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide
| Product | BIOS Update Version | BIOS Release Date (MM-DD-YYYY) Expected Release (Month YYYY) |
| Inspiron 5400 | 1.15.0 | 10/5/2022 |
| Inspiron 5401 All-In-One | 1.15.0 | 10/5/2022 |
| Inspiron 5477 | 1.2.23 | 10/23/2022 |
| Inspiron 5480 | 2.18.0 | 12/12/2022 |
| Inspiron 5481 2-in-1 | 2.18.0 | 12/12/2022 |
| Inspiron 5490 All-In-One | 1.17.0 | 10/5/2022 |
| Inspiron 5570 | 1.12.0 | 12/14/2022 |
| Inspiron 5680 | 2.13.0 | 10/31/2022 |
| Inspiron 5770 | 1.12.0 | 12/14/2022 |
| Inspiron 7590 | 1.16.0 | 10/6/2022 |
| Inspiron 7591 | 1.16.0 | 10/6/2022 |
| Inspiron 7700 All-In-One | 1.15.0 | 10/5/2022 |
| Inspiron 7777 | 1.2.23 | 10/23/2022 |
| Inspiron 7790 | 1.17.0 | 10/5/2022 |
| Inspiron 5491 All-In-One | 1.17.0 | 10/5/2022 |
| Latitude 13 3380 | 1.21.0 | 12/21/2022 |
| Latitude 3120 | 1.12.1 | 10/11/2022 |
| Latitude 3180 | 1.21.0 | 12/21/2022 |
| Latitude 3189 | 1.21.0 | 12/20/2022 |
| Latitude 3190 | 1.24.0 | 12/20/2022 |
| Latitude 3190 2-in-1 | 1.24.0 | 12/20/2022 |
| Latitude 3300 | 1.19.0 | 12/21/2022 |
| Latitude 3310 | 1.18.0 | 10/14/2022 |
| Latitude 3310 2-in-1 | 1.17.0 | 10/14/2022 |
| Latitude 3390 2-in-1 | 1.23.1 | 12/20/2022 |
| Latitude 3490 | 1.23.0 | 12/14/2022 |
| Latitude 3590 | 1.23.0 | 12/14/2022 |
| Latitude 5280 | 1.28.0 | 12/20/2022 |
| Latitude 5285 2-in-1 | 1.21.0 | 12/20/2022 |
| Latitude 5288 | 1.28.0 | 12/20/2022 |
| Latitude 5289 | 1.31.0 | 12/20/2022 |
| Latitude 5290 | 1.26.0 | 12/20/2022 |
| Latitude 5290 2-in-1 | 1.24.0 | 12/20/2022 |
| Latitude 5300 | 1.24.0 | 10/13/2022 |
| Latitude 5300 2-in-1 | 1.24.0 | 10/13/2022 |
| Latitude 5310 | 1.17.0 | 10/13/2022 |
| Latitude 5310 2-in-1 | 1.17.0 | 10/13/2022 |
| Latitude 5400 | 1.21.0 | 10/21/2022 |
| Latitude 5401 | 1.23.0 | 10/21/2022 |
| Latitude 5410 | 1.17.0 | 10/21/2022 |
| Latitude 5411 | 1.17.0 | 10/21/2022 |
| Latitude 5414 Rugged | 1.39.0 | 12/9/2022 |
| Latitude 5420 Rugged | 1.21.1 | 11/16/2022 |
| Latitude 5424 Rugged | 1.21.1 | 11/16/2022 |
| Latitude 5480 | 1.28.0 | 12/20/2022 |
| Latitude 5488 | 1.28.0 | 12/20/2022 |
| Latitude 5490 | 1.26.0 | 12/20/2022 |
| Latitude 5491 | 1.25.0 | 12/26/2022 |
| Latitude 5500 | 1.21.0 | 10/21/2022 |
| Latitude 5501 | 1.23.0 | 10/21/2022 |
| Latitude 5510 | 1.17.0 | 10/21/2022 |
| Latitude 5511 | 1.17.0 | 10/21/2022 |
| Latitude 5580 | 1.28.0 | 12/20/2022 |
| Latitude 5590 | 1.26.0 | 12/20/2022 |
| Latitude 5591 | 1.25.0 | 12/26/2022 |
| Latitude 7200 2-in-1 | 1.20.0 | 10/13/2022 |
| Latitude 7210 2-in-1 | 1.18.0 | 10/12/2022 |
| Latitude 7212 Rugged Extreme Tablet | 1.42.0 | 12/9/2022 |
| Latitude 7214 Rugged Extreme | 1.39.0 | 12/9/2022 |
| Latitude 7220 Rugged Extreme Tablet | 1.26.1 | 11/9/2022 |
| Latitude 7220EX Rugged Extreme Tablet | 1.26.1 | 11/9/2022 |
| Latitude 7275 2-in-1 | 1.18.0 | 12/20/2022 |
| Latitude 7280 | 1.29.0 | 12/20/2022 |
| Latitude 7285 2-in-1 | 1.19.0 | 12/20/2022 |
| Latitude 7290 | 1.30.0 | 12/22/2022 |
| Latitude 7300 | 1.23.0 | 10/31/2022 |
| Latitude 7310 | 1.19.0 | 11/7/2022 |
| Latitude 7370 | 1.32.3 | 12/20/2022 |
| Latitude 7380 | 1.29.0 | 12/20/2022 |
| Latitude 7389 | 1.31.0 | 12/20/2022 |
| Latitude 7390 | 1.30.0 | 12/22/2022 |
| Latitude 7390 2-in-1 | 1.26.0 | 12/20/2022 |
| Latitude 7400 | 1.23.0 | 10/31/2022 |
| Latitude 7400 2-in-1 | 1.19.0 | 10/13/2022 |
| Latitude 7410 | 1.19.0 | 11/7/2022 |
| Latitude 7414 Rugged Extreme | 1.39.0 | 12/9/2022 |
| Latitude 7424 Rugged Extreme | 1.21.1 | 11/16/2022 |
| Latitude 7480 | 1.29.0 | 12/20/2022 |
| Latitude 7490 | 1.30.0 | 12/22/2022 |
| Latitude 9410 | 1.18.0 | 10/25/2022 |
| Latitude 9510 | 1.16.0 | 10/12/2022 |
| Latitude E7270 | 1.36.3 | 11/7/2022 |
| Latitude E7470 | 1.36.3 | 11/7/2022 |
| OptiPlex 3050 | 1.23.0 | 12/22/2022 |
| OptiPlex 3050 All-In-One | 1.24.0 | 12/22/2022 |
| OptiPlex 3060 | 1.23.0 | 12/13/2022 |
| OptiPlex 3070 | 1.19.0 | 12/13/2022 |
| OptiPlex 3080 | 2.16.0 | 10/11/2022 |
| OptiPlex 3090 | 2.9.0 | 10/11/2022 |
| OptiPlex 3280 All-In-One | 1.17.0 | 10/11/2022 |
| OptiPlex 5050 | 1.23.0 | 12/22/2022 |
| OptiPlex 5060 | 1.23.0 | 12/13/2022 |
| OptiPlex 5070 | 1.19.0 | 12/13/2022 |
| OptiPlex 5080 | 1.16.0 | 10/11/2022 |
| OptiPlex 5250 | 1.24.0 | 12/22/2022 |
| OptiPlex 5260 All-In-One | 1.24.0 | 12/13/2022 |
| OptiPlex 5270 All-In-One | 1.19.0 | 12/13/2022 |
| OptiPlex 5480 All-In-One | 1.18.0 | 10/11/2022 |
| OptiPlex 7050 | 1.23.0 | 12/22/2022 |
| OptiPlex 7060 | 1.23.0 | 12/13/2022 |
| OptiPlex 7070 | 1.19.0 | 12/13/2022 |
| OptiPlex 7070 Ultra | 1.15.0 | 10/17/2022 |
| OptiPlex 7071 | 1.17.0 | 12/13/2022 |
| OptiPlex 7080 | 1.16.0 | 10/11/2022 |
| OptiPlex 7450 | 1.24.0 | 12/22/2022 |
| OptiPlex 7460 All-In-One | 1.24.0 | 12/13/2022 |
| OptiPlex 7470 All-In-One | 1.19.0 | 12/13/2022 |
| OptiPlex 7480 All-In-One | 1.18.0 | 10/11/2022 |
| OptiPlex 7760 All-In-One | 1.24.0 | 12/13/2022 |
| OptiPlex 7770 All-In-One | 1.19.0 | 12/13/2022 |
| OptiPlex 7780 All-In-One | 1.18.0 | 10/11/2022 |
| OptiPlex XE3 | 1.23.0 | 12/13/2022 |
| Precision 3240 Compact | 1.15.0 | 10/11/2022 |
| Precision 3420 Tower | 2.24.0 | 12/21/2022 |
| Precision 3430 Tower | 1.22.0 | 12/12/2022 |
| Precision 3431 Tower | 1.17.0 | 12/12/2022 |
| Precision 3440 | 1.16.0 | 10/11/2022 |
| Precision 3510 | 1.34.3 | 12/23/2022 |
| Precision 3520 | 1.28.0 | 12/20/2022 |
| Precision 3530 | 1.25.0 | 12/26/2022 |
| Precision 3540 | 1.21.0 | 10/21/2022 |
| Precision 3541 | 1.23.0 | 10/21/2022 |
| Precision 3550 | 1.17.0 | 10/21/2022 |
| Precision 3551 | 1.17.0 | 10/21/2022 |
| Precision 3620 Tower | 2.24.0 | 12/21/2022 |
| Precision 3630 Tower | 2.18.0 | 12/13/2022 |
| Precision 3640 Tower | 1.18.0 | 10/11/2022 |
| Precision 3930 Rack | 2.23.0 | 12/12/2022 |
| Precision 5520 | 1.31.0 | 12/20/2022 |
| Precision 5530 | 1.29.0 | 12/14/2022 |
| Precision 5530 2-in-1 | 1.22.8 | 12/14/2022 |
| Precision 5540 | 1.19.0 | 10/12/2022 |
| Precision 5720 All-In-One | 2.17.0 | 12/21/2022 |
| Precision 5820 Tower | 2.24.0 | 12/13/2022 |
| Precision 7510 | 1.30.3 | 12/20/2022 |
| Precision 7520 | 1.28.0 | 12/20/2022 |
| Precision 7530 | 1.26.0 | 12/23/2022 |
| Precision 7540 | 1.23.0 | 10/21/2022 |
| Precision 7550 | 1.19.0 | 10/25/2022 |
| Precision 7710 | 1.30.3 | 12/20/2022 |
| Precision 7720 | 1.28.0 | 12/20/2022 |
| Precision 7730 | 1.26.0 | 12/23/2022 |
| Precision 7740 | 1.23.0 | 10/21/2022 |
| Precision 7750 | 1.19.0 | 10/25/2022 |
| Precision 7820 Tower | 2.28.0 | 12/12/2022 |
| Precision 7920 Tower | 2.28.0 | 12/12/2022 |
| Vostro 3070 | 2.26.0 | 12/21/2022 |
| Vostro 3267 | 1.24.0 | 12/14/2022 |
| Vostro 3268 | 1.24.0 | 12/14/2022 |
| Vostro 3470 | 2.26.0 | 12/21/2022 |
| Vostro 3471 | 1.13.0 | 12/19/2022 |
| Vostro 3480 | 1.21.0 | 10/26/2022 |
| Vostro 3481 | 1.20.0 | 12/13/2022 |
| Vostro 3580 | 1.21.0 | 10/26/2022 |
| Vostro 3581 | 1.20.0 | 12/13/2022 |
| Vostro 3582 | 1.17.0 | 12/13/2022 |
| Vostro 3583 | 1.21.0 | 10/26/2022 |
| Vostro 3584 | 1.20.0 | 12/13/2022 |
| Vostro 3667 | 1.24.0 | 12/14/2022 |
| Vostro 3668 | 1.24.0 | 12/14/2022 |
| Vostro 3669 | 1.24.0 | 12/14/2022 |
| Vostro 3670 | 2.26.0 | 12/21/2022 |
| Vostro 3671 | 1.13.0 | 12/19/2022 |
| Vostro 3681 | 2.16.2 | 12/12/2022 |
| Vostro 3881 | 2.16.2 | 12/12/2022 |
| Vostro 3888 | 2.16.2 | 12/12/2022 |
| Vostro 5090 | 1.17.0 | 12/12/2022 |
| Vostro 5880 | 1.16.0 | 10/11/2022 |
| Vostro 7590 | 1.16.0 | 10/6/2022 |
| Wyse 5070 | 1.19.1 | 10/12/2022 |
| Wyse 5470 | 1.16.1 | 10/12/2022 |
| Wyse 5470 All-In-One | 1.17.0 | 10/12/2022 |
| Wyse 7040 Thin Client | 1.19.0 | 12/13/2022 |
| XPS 13 9380 | 1.22.0 | 12/13/2022 |
| XPS 15 7590 | 1.19.0 | 10/12/2022 |
| XPS 15 9575 2-in-1 | 1.24.0 | 12/14/2022 |
| XPS 8930 | 1.1.28 | 01/18/2023 |
| XPS 8940 | 2.10.0 | 10/11/2022 |
| XPS 8950 | 1.7.0 | 10/10/2022 |
02 feb 2023
3
Dell Security Advisory