CVE-2022-34412
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer...
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.
- Record
CVE-2022-34412- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119, CWE-119
- Updated
- 2026-11-02
EUVDEUVD-2022-37367
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.
- Record
EUVD-2022-37367- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-6876-f479-4vrh
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer...
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.
- Record
GHSA-6876-f479-4vrh- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
NVD
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.
- Record
CVE-2022-34412- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
- dell c4130 firmware
- dell c4140 firmware
- dell c6320 firmware
- dell c6420 firmware
- dell c6520 firmware
- dell c6525 firmware
- dell dss8440 firmware
- dell fc430 firmware
- dell fc630 firmware
- dell fc640 firmware
- dell fc830 firmware
- dell m630 firmware
Show 69 moreShow less
- dell m630p firmware
- dell m640 firmware
- dell m640p firmware
- dell m830 firmware
- dell m830p firmware
- dell mx740c firmware
- dell mx750c firmware
- dell mx840c firmware
- dell nx3230 firmware
- dell nx3240 firmware
- dell nx3330 firmware
- dell nx3340 firmware
- dell nx430 firmware
- dell nx440 firmware
- dell poweredge platform
- dell r230 firmware
- dell r240 firmware
- dell r250 firmware
- dell r330 firmware
- dell r340 firmware
- dell r350 firmware
- dell r430 firmware
- dell r440 firmware
- dell r450 firmware
- dell r530 firmware
- dell r540 firmware
- dell r550 firmware
- dell r630 firmware
- dell r640 firmware
- dell r6415 firmware
- dell r650 firmware
- dell r650xs firmware
- dell r6515 firmware
- dell r6525 firmware
- dell r730 firmware
- dell r730xd firmware
- dell r740 firmware
- dell r740xd2 firmware
- dell r740xd firmware
- dell r7415 firmware
- dell r7425 firmware
- dell r750 firmware
- dell r750xa firmware
- dell r750xs firmware
- dell r7515 firmware
- dell r7525 firmware
- dell r830 firmware
- dell r840 firmware
- dell r930 firmware
- dell r940 firmware
- dell r940xa firmware
- dell t130 firmware
- dell t140 firmware
- dell t150 firmware
- dell t330 firmware
- dell t340 firmware
- dell t350 firmware
- dell t430 firmware
- dell t440 firmware
- dell t550 firmware
- dell t630 firmware
- dell t640 firmware
- dell xe2420 firmware
- dell xe7420 firmware
- dell xe7440 firmware
- dell xe8545 firmware
- dell xr11 firmware
- dell xr12 firmware
- dell xr2 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-34412 is a high vulnerability (CVSS 7.5) in Dell C4130 Firmware, published March 16, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 10th percentile. No source names a fixed version.