DSA-2022-032: Dell Client Platform Security Update for InsydeH2O UEFI Firmware Vulnerabilities

摘要: Select Dell Client Consumer (Inspiron, Vostro, and G-Series with AMD processors) platforms were assessed to be impacted by multiple security vulnerabilities in InsydeH2O UEFI. Remediation is in progress with estimated release dates below. ...

本文章適用於 本文章不適用於 本文無關於任何特定產品。 本文未識別所有產品版本。
查看其他資源

影響

High

詳細資料

Third-party Component CVEs  More Information  
InsydeH2O UEFI Firmware CVE-2021-33626 Insyde Security Advisory
CVE-2021-33627
CVE-2021-41837
CVE-2021-41838
CVE-2021-41839
CVE-2021-41841
CVE-2021-42059
CVE-2021-42113
CVE-2021-43323
CVE-2021-43615
CVE-2021-45969
CVE-2021-45970
CVE-2021-45971
CVE-2022-24069
CVE-2021-33625
CVE-2021-41840
CVE-2021-42060
CVE-2021-42554
CVE-2021-43522
CVE-2022-24030
CVE-2022-24031
CVE-2020-27339
Third-party Component CVEs  More Information  
InsydeH2O UEFI Firmware CVE-2021-33626 Insyde Security Advisory
CVE-2021-33627
CVE-2021-41837
CVE-2021-41838
CVE-2021-41839
CVE-2021-41841
CVE-2021-42059
CVE-2021-42113
CVE-2021-43323
CVE-2021-43615
CVE-2021-45969
CVE-2021-45970
CVE-2021-45971
CVE-2022-24069
CVE-2021-33625
CVE-2021-41840
CVE-2021-42060
CVE-2021-42554
CVE-2021-43522
CVE-2022-24030
CVE-2022-24031
CVE-2020-27339
Dell Technologies 建議所有客戶不僅要參考 CVSS 基本分數，也要將可能會影響與特定安全漏洞相關之潛在嚴重性的所有相關暫時和環境分數納入考量。

受影響的產品與補救措施

Product BIOS Version BIOS Release Date (MM/DD/YYYY)
or
BIOS Release Plan
(Month/YYYY)
Dell G5 5505 1.10.0 02/21/2022
Inspiron 27 7775 2.15.0 02/24/2022
Inspiron 3180 1.4.4 04/13/2022
Inspiron 3185 1.4.4 04/13/2022
Inspiron 3505 1.5.0 02/18/2022
Inspiron 3515 1.4.0 02/18/2022
Inspiron 3515 1.4.0 02/18/2022
Inspiron 5405 1.6.0 02/22/2022
Inspiron 5415 1.7.1 02/16/2022
Inspiron 5505 1.6.0 02/22/2022
Inspiron 5515 1.7.1 02/16/2022
Inspiron 5575 1.5.0 02/18/2022
Inspiron 5775 1.5.0 02/18/2022
Inspiron 7375 1.7.0 04/22/2022
Inspiron 7405 2-in-1 1.7.0 02/23/2022
Inspiron 7415 1.7.1 02/15/2022
Vostro 3405 1.5.0 02/18/2022
Vostro 5415 1.7.1 02/16/2022
Vostro 5515 1.7.1 02/16/2022
Inspiron 22-3275 1.8.0 02/23/2022
Inspiron 24-3475 1.8.0 02/23/2022
Inspiron 3195 2-in-1 1.4.1 04/13/2022
Inspiron 3585 1.6.0 02/18/2022
Inspiron 3595 1.2.1 02/28/2022
Inspiron 3785 1.6.0 02/18/2022
Inspiron 5485 2.8.0 04/25/2022
Inspiron 5485 2-in-1 2.8.0 04/25/2022
Inspiron 5585 2.8.0 04/25/2022
Inspiron 5675 1.5.0 02/25/2022
Product BIOS Version BIOS Release Date (MM/DD/YYYY)
or
BIOS Release Plan
(Month/YYYY)
Dell G5 5505 1.10.0 02/21/2022
Inspiron 27 7775 2.15.0 02/24/2022
Inspiron 3180 1.4.4 04/13/2022
Inspiron 3185 1.4.4 04/13/2022
Inspiron 3505 1.5.0 02/18/2022
Inspiron 3515 1.4.0 02/18/2022
Inspiron 3515 1.4.0 02/18/2022
Inspiron 5405 1.6.0 02/22/2022
Inspiron 5415 1.7.1 02/16/2022
Inspiron 5505 1.6.0 02/22/2022
Inspiron 5515 1.7.1 02/16/2022
Inspiron 5575 1.5.0 02/18/2022
Inspiron 5775 1.5.0 02/18/2022
Inspiron 7375 1.7.0 04/22/2022
Inspiron 7405 2-in-1 1.7.0 02/23/2022
Inspiron 7415 1.7.1 02/15/2022
Vostro 3405 1.5.0 02/18/2022
Vostro 5415 1.7.1 02/16/2022
Vostro 5515 1.7.1 02/16/2022
Inspiron 22-3275 1.8.0 02/23/2022
Inspiron 24-3475 1.8.0 02/23/2022
Inspiron 3195 2-in-1 1.4.1 04/13/2022
Inspiron 3585 1.6.0 02/18/2022
Inspiron 3595 1.2.1 02/28/2022
Inspiron 3785 1.6.0 02/18/2022
Inspiron 5485 2.8.0 04/25/2022
Inspiron 5485 2-in-1 2.8.0 04/25/2022
Inspiron 5585 2.8.0 04/25/2022
Inspiron 5675 1.5.0 02/25/2022

修訂歷史記錄

RevisionDateDescription
1.02022-02-04Initial Release
1.12022-02-08Updated Estimated Release Dates
1.22022-02-16Updated Release Dates
1.32022-03-04Updated Release Dates
1.42022-04-06Updated Release Dates
1.52022-04-25Final Update to Release Dates

相關資訊

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

法律免責聲明

受影響的產品

Product Security Information

產品

Inspiron 11 3180, Inspiron 5405, Inspiron 3505, Inspiron 27 7775
文章屬性
文章編號: 000195969
文章類型: Dell Security Advisory
上次修改時間: 18 9月 2025
向其他 Dell 使用者尋求您問題的答案
支援服務
檢查您的裝置是否在支援服務的涵蓋範圍內。