{"id":"CVE-2022-34398","aliases":["EUVD-2022-37353","GHSA-8qgg-7996-jqj3"],"status":"published","title":"Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious...","description":"Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0016,"percentile":0.05135,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-367"],"published":"2023-02-01T05:28:00Z","modified":"2026-06-17T04:50:14Z","products":[{"vendor":"dell","product":"alienware_area_51m_r1_firmware"},{"vendor":"dell","product":"alienware_area_51m_r2_firmware"},{"vendor":"dell","product":"alienware_aurora_r10_firmware"},{"vendor":"dell","product":"alienware_aurora_r11_firmware"},{"vendor":"dell","product":"alienware_aurora_r12_firmware"},{"vendor":"dell","product":"alienware_aurora_r13_firmware"},{"vendor":"dell","product":"alienware_aurora_r8_firmware"},{"vendor":"dell","product":"alienware_aurora_r9_firmware"},{"vendor":"dell","product":"alienware_m15_r1_firmware"},{"vendor":"dell","product":"alienware_m15_r2_firmware"},{"vendor":"dell","product":"alienware_m15_r3_firmware"},{"vendor":"dell","product":"alienware_m15_r4_firmware"},{"vendor":"dell","product":"alienware_m17_r1_firmware"},{"vendor":"dell","product":"alienware_m17_r2_firmware"},{"vendor":"dell","product":"alienware_m17_r3_firmware"},{"vendor":"dell","product":"alienware_m17_r4_firmware"},{"vendor":"dell","product":"alienware_x14_firmware"},{"vendor":"dell","product":"alienware_x15_r1_firmware"},{"vendor":"dell","product":"alienware_x15_r2_firmware"},{"vendor":"dell","product":"alienware_x17_r1_firmware"},{"vendor":"dell","product":"alienware_x17_r2_firmware"},{"vendor":"dell","product":"aurora_r14_firmware"},{"vendor":"dell","product":"chengming_3980_firmware"},{"vendor":"dell","product":"chengming_3988_firmware"},{"vendor":"dell","product":"chengming_3990_firmware"},{"vendor":"dell","product":"chengming_3991_firmware"},{"vendor":"dell","product":"cpg bios"},{"vendor":"dell","product":"dell_g3_15_3590_firmware"},{"vendor":"dell","product":"dell_g3_3579_firmware"},{"vendor":"dell","product":"dell_g3_3779_firmware"},{"vendor":"dell","product":"dell_g5_15_5590_firmware"},{"vendor":"dell","product":"dell_g5_5000_firmware"},{"vendor":"dell","product":"dell_g5_5090_firmware"},{"vendor":"dell","product":"dell_g7_15_7590_firmware"},{"vendor":"dell","product":"dell_g7_17_7790_firmware"},{"vendor":"dell","product":"dell_latitude_3480_firmware"},{"vendor":"dell","product":"dell_latitude_3580_firmware"},{"vendor":"dell","product":"edge_gateway_3000_firmware"},{"vendor":"dell","product":"edge_gateway_5000_firmware"},{"vendor":"dell","product":"embedded_box_pc_3000_firmware"},{"vendor":"dell","product":"embedded_box_pc_5000_firmware"},{"vendor":"dell","product":"inspiron_3280_firmware"},{"vendor":"dell","product":"inspiron_3470_firmware"},{"vendor":"dell","product":"inspiron_3471_firmware"},{"vendor":"dell","product":"inspiron_3480_firmware"},{"vendor":"dell","product":"inspiron_3481_firmware"},{"vendor":"dell","product":"inspiron_3482_firmware"},{"vendor":"dell","product":"inspiron_3502_firmware"},{"vendor":"dell","product":"inspiron_3510_firmware"},{"vendor":"dell","product":"inspiron_3521_firmware"},{"vendor":"dell","product":"inspiron_3580_firmware"},{"vendor":"dell","product":"inspiron_3581_firmware"},{"vendor":"dell","product":"inspiron_3582_firmware"},{"vendor":"dell","product":"inspiron_3583_firmware"},{"vendor":"dell","product":"inspiron_3584_firmware"},{"vendor":"dell","product":"inspiron_3670_firmware"},{"vendor":"dell","product":"inspiron_3671_firmware"},{"vendor":"dell","product":"inspiron_3780_firmware"},{"vendor":"dell","product":"inspiron_3781_firmware"},{"vendor":"dell","product":"inspiron_3782_firmware"},{"vendor":"dell","product":"inspiron_3880_firmware"},{"vendor":"dell","product":"inspiron_3881_firmware"},{"vendor":"dell","product":"inspiron_5400_firmware"},{"vendor":"dell","product":"inspiron_5401_all-in-one_firmware"},{"vendor":"dell","product":"inspiron_5477_firmware"},{"vendor":"dell","product":"inspiron_5480_firmware"},{"vendor":"dell","product":"inspiron_5481_2-in-1_firmware"},{"vendor":"dell","product":"inspiron_5490_all-in-one_firmware"},{"vendor":"dell","product":"inspiron_5570_firmware"},{"vendor":"dell","product":"inspiron_5680_firmware"},{"vendor":"dell","product":"inspiron_5770_firmware"},{"vendor":"dell","product":"inspiron_7590_firmware"},{"vendor":"dell","product":"inspiron_7591_firmware"},{"vendor":"dell","product":"inspiron_7700_all-in-one_firmware"},{"vendor":"dell","product":"inspiron_7777_firmware"},{"vendor":"dell","product":"inspiron_7790_firmware"},{"vendor":"dell","product":"latitude_13_3380_firmware"},{"vendor":"dell","product":"latitude_3120_firmware"},{"vendor":"dell","product":"latitude_3180_firmware"},{"vendor":"dell","product":"latitude_3189_firmware"},{"vendor":"dell","product":"latitude_3190_2-in-1_firmware"},{"vendor":"dell","product":"latitude_3190_firmware"},{"vendor":"dell","product":"latitude_3300_firmware"},{"vendor":"dell","product":"latitude_3310_2-in-1_firmware"},{"vendor":"dell","product":"latitude_3310_firmware"},{"vendor":"dell","product":"latitude_3390_2-in-1_firmware"},{"vendor":"dell","product":"latitude_3490_firmware"},{"vendor":"dell","product":"latitude_3590_firmware"},{"vendor":"dell","product":"latitude_5280_firmware"},{"vendor":"dell","product":"latitude_5285_2-in-1_firmware"},{"vendor":"dell","product":"latitude_5288_firmware"},{"vendor":"dell","product":"latitude_5289_firmware"},{"vendor":"dell","product":"latitude_5290_2-in-1_firmware"},{"vendor":"dell","product":"latitude_5290_firmware"},{"vendor":"dell","product":"latitude_5300_2-in-1_firmware"},{"vendor":"dell","product":"latitude_5300_firmware"},{"vendor":"dell","product":"latitude_5310_2-in-1_firmware"},{"vendor":"dell","product":"latitude_5310_firmware"},{"vendor":"dell","product":"latitude_5400_firmware"},{"vendor":"dell","product":"latitude_5401_firmware"},{"vendor":"dell","product":"latitude_5410_firmware"},{"vendor":"dell","product":"latitude_5411_firmware"},{"vendor":"dell","product":"latitude_5414_rugged_firmware"},{"vendor":"dell","product":"latitude_5420_rugged_firmware"},{"vendor":"dell","product":"latitude_5424_rugged_firmware"},{"vendor":"dell","product":"latitude_5480_firmware"},{"vendor":"dell","product":"latitude_5488_firmware"},{"vendor":"dell","product":"latitude_5490_firmware"},{"vendor":"dell","product":"latitude_5491_firmware"},{"vendor":"dell","product":"latitude_5500_firmware"},{"vendor":"dell","product":"latitude_5501_firmware"},{"vendor":"dell","product":"latitude_5510_firmware"},{"vendor":"dell","product":"latitude_5511_firmware"},{"vendor":"dell","product":"latitude_5580_firmware"},{"vendor":"dell","product":"latitude_5590_firmware"},{"vendor":"dell","product":"latitude_5591_firmware"},{"vendor":"dell","product":"latitude_7200_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7210_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7212_rugged_extreme_tablet_firmware"},{"vendor":"dell","product":"latitude_7214_rugged_extreme_firmware"},{"vendor":"dell","product":"latitude_7220_rugged_extreme_tablet_firmware"},{"vendor":"dell","product":"latitude_7220ex_rugged_extreme_tablet_firmware"},{"vendor":"dell","product":"latitude_7275_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7280_firmware"},{"vendor":"dell","product":"latitude_7285_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7290_firmware"},{"vendor":"dell","product":"latitude_7300_firmware"},{"vendor":"dell","product":"latitude_7310_firmware"},{"vendor":"dell","product":"latitude_7370_firmware"},{"vendor":"dell","product":"latitude_7380_firmware"},{"vendor":"dell","product":"latitude_7389_firmware"},{"vendor":"dell","product":"latitude_7390_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7390_firmware"},{"vendor":"dell","product":"latitude_7400_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7400_firmware"},{"vendor":"dell","product":"latitude_7410_firmware"},{"vendor":"dell","product":"latitude_7414_rugged_extreme_firmware"},{"vendor":"dell","product":"latitude_7424_rugged_extreme_firmware"},{"vendor":"dell","product":"latitude_7480_firmware"},{"vendor":"dell","product":"latitude_7490_firmware"},{"vendor":"dell","product":"latitude_9410_firmware"},{"vendor":"dell","product":"latitude_9510_firmware"},{"vendor":"dell","product":"latitude_e7270_firmware"},{"vendor":"dell","product":"latitude_e7470_firmware"},{"vendor":"dell","product":"optiplex_3050_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_3050_firmware"},{"vendor":"dell","product":"optiplex_3060_firmware"},{"vendor":"dell","product":"optiplex_3070_firmware"},{"vendor":"dell","product":"optiplex_3080_firmware"},{"vendor":"dell","product":"optiplex_3090_firmware"},{"vendor":"dell","product":"optiplex_3280_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_5050_firmware"},{"vendor":"dell","product":"optiplex_5060_firmware"},{"vendor":"dell","product":"optiplex_5070_firmware"},{"vendor":"dell","product":"optiplex_5080_firmware"},{"vendor":"dell","product":"optiplex_5250_firmware"},{"vendor":"dell","product":"optiplex_5260_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_5270_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_5480_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7050_firmware"},{"vendor":"dell","product":"optiplex_7060_firmware"},{"vendor":"dell","product":"optiplex_7070_firmware"},{"vendor":"dell","product":"optiplex_7070_ultra_firmware"},{"vendor":"dell","product":"optiplex_7071_firmware"},{"vendor":"dell","product":"optiplex_7080_firmware"},{"vendor":"dell","product":"optiplex_7450_firmware"},{"vendor":"dell","product":"optiplex_7460_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7470_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7480_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7760_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7770_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7780_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_xe3_firmware"},{"vendor":"dell","product":"precision_3240_compact_firmware"},{"vendor":"dell","product":"precision_3420_tower_firmware"},{"vendor":"dell","product":"precision_3430_tower_firmware"},{"vendor":"dell","product":"precision_3431_tower_firmware"},{"vendor":"dell","product":"precision_3440_firmware"},{"vendor":"dell","product":"precision_3510_firmware"},{"vendor":"dell","product":"precision_3520_firmware"},{"vendor":"dell","product":"precision_3530_firmware"},{"vendor":"dell","product":"precision_3540_firmware"},{"vendor":"dell","product":"precision_3541_firmware"},{"vendor":"dell","product":"precision_3550_firmware"},{"vendor":"dell","product":"precision_3551_firmware"},{"vendor":"dell","product":"precision_3620_tower_firmware"},{"vendor":"dell","product":"precision_3630_tower_firmware"},{"vendor":"dell","product":"precision_3640_tower_firmware"},{"vendor":"dell","product":"precision_3930_rack_firmware"},{"vendor":"dell","product":"precision_5520_firmware"},{"vendor":"dell","product":"precision_5530_2-in-1_firmware"},{"vendor":"dell","product":"precision_5530_firmware"},{"vendor":"dell","product":"precision_5540_firmware"},{"vendor":"dell","product":"precision_5720_all-in-one_firmware"},{"vendor":"dell","product":"precision_5820_tower_firmware"},{"vendor":"dell","product":"precision_7510_firmware"},{"vendor":"dell","product":"precision_7520_firmware"},{"vendor":"dell","product":"precision_7530_firmware"},{"vendor":"dell","product":"precision_7540_firmware"},{"vendor":"dell","product":"precision_7550_firmware"},{"vendor":"dell","product":"precision_7710_firmware"},{"vendor":"dell","product":"precision_7720_firmware"},{"vendor":"dell","product":"precision_7730_firmware"},{"vendor":"dell","product":"precision_7740_firmware"},{"vendor":"dell","product":"precision_7750_firmware"},{"vendor":"dell","product":"precision_7820_tower_firmware"},{"vendor":"dell","product":"precision_7920_tower_firmware"},{"vendor":"dell","product":"vostro_3070_firmware"},{"vendor":"dell","product":"vostro_3267_firmware"},{"vendor":"dell","product":"vostro_3268_firmware"},{"vendor":"dell","product":"vostro_3470_firmware"},{"vendor":"dell","product":"vostro_3471_firmware"},{"vendor":"dell","product":"vostro_3480_firmware"},{"vendor":"dell","product":"vostro_3481_firmware"},{"vendor":"dell","product":"vostro_3580_firmware"},{"vendor":"dell","product":"vostro_3581_firmware"},{"vendor":"dell","product":"vostro_3582_firmware"},{"vendor":"dell","product":"vostro_3583_firmware"},{"vendor":"dell","product":"vostro_3584_firmware"},{"vendor":"dell","product":"vostro_3667_firmware"},{"vendor":"dell","product":"vostro_3668_firmware"},{"vendor":"dell","product":"vostro_3669_firmware"},{"vendor":"dell","product":"vostro_3670_firmware"},{"vendor":"dell","product":"vostro_3671_firmware"},{"vendor":"dell","product":"vostro_3681_firmware"},{"vendor":"dell","product":"vostro_3881_firmware"},{"vendor":"dell","product":"vostro_3888_firmware"},{"vendor":"dell","product":"vostro_5090_firmware"},{"vendor":"dell","product":"vostro_5880_firmware"},{"vendor":"dell","product":"vostro_7590_firmware"},{"vendor":"dell","product":"wyse_5070_firmware"},{"vendor":"dell","product":"wyse_5470_all-in-one_firmware"},{"vendor":"dell","product":"wyse_5470_firmware"},{"vendor":"dell","product":"wyse_7040_thin_firmware"},{"vendor":"dell","product":"xps_13_9380_firmware"},{"vendor":"dell","product":"xps_15_7590_firmware"},{"vendor":"dell","product":"xps_15_9575_2-in-1_firmware"},{"vendor":"dell","product":"xps_8930_firmware"},{"vendor":"dell","product":"xps_8940_firmware"},{"vendor":"dell","product":"xps_8950_firmware"}],"references":[{"url":"https://www.dell.com/support/kbdoc/000206038","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34398"},{"url":"https://github.com/advisories/GHSA-8qgg-7996-jqj3"}],"sources":{"cve":[{"id":"CVE-2022-34398","description":"\nDell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system.\n\n\n\n\n\n","status":"published","published":"2023-02-01T05:28:00.739Z","modified":"2025-03-26T18:53:45.169Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:34:42.354707Z"}],"euvd":[{"id":"EUVD-2022-37353","description":"\nDell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system.\n\n\n\n\n\n","status":"published","published":"2023-02-01T05:28:00Z","modified":"2025-03-26T18:53:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:50.381676Z"}],"ghsa":[{"id":"GHSA-8qgg-7996-jqj3","title":"Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious...","description":"Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system.","status":"published","published":"2023-02-01T06:30:29Z","modified":"2023-02-17T05:05:50Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:54:08.612342Z"}],"nvd":[{"id":"CVE-2022-34398","description":"\nDell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system.\n\n\n\n\n\n","status":"published","published":"2023-02-01T06:15:08.71Z","modified":"2026-06-17T04:50:14.45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:07:36.026349Z"}]}}