CVE-2022-34398

Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious...

7.5 High

Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: High
Privileges needed: Low
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.16%Down 0.9 points since Feb 1, 2023

What each source reports

CVE List Score used 7.5

Record: CVE-2022-34398
CVSS 3.1: 7.5 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Weakness: CWE-367
Updated: 2026-11-02

EUVDEUVD-2022-37353 7.5

Record: EUVD-2022-37353
CVSS 3.1: 7.5 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-8qgg-7996-jqj3 7.0

Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious...

Record: GHSA-8qgg-7996-jqj3
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-367
Updated: 2026-11-02

NVD 7.5

Record: CVE-2022-34398
CVSS 3.1: 7.5 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-367
Updated: 2026-11-02

Affected products

Show 228 moreShow less

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-34398 is a high vulnerability (CVSS 7.5) in Dell Alienware Area 51m R1 Firmware, published February 1, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.16%, the 5th percentile. No source names a fixed version.