Alienware Area 51M R1 Firmware CVE-2022-32491

HIGH

Buffer Overflow (CWE-119)

2022-10-12 security_alert@emc.com

Dell Buffer Overflow Alienware Area 51M R1 Firmware Alienware Area 51M R2 Firmware Alienware Aurora R11 Firmware Alienware Aurora R12 Firmware Alienware Aurora R13 Firmware Alienware Aurora R10 Firmware Alienware Aurora R8 Firmware Alienware Aurora R9 Firmware Alienware M15 R1 Firmware Alienware M15 R2 Firmware Alienware M15 R3 Firmware Alienware M15 R4 Firmware Alienware M17 R1 Firmware Alienware M17 R2 Firmware Alienware M17 R3 Firmware Alienware M17 R4 Firmware Alienware X14 Firmware Alienware X15 R1 Firmware Alienware X15 R2 Firmware Alienware X17 R1 Firmware Alienware X17 R2 Firmware Chengming 3980 Firmware Chengming 3988 Firmware Chengming 3990 Firmware Chengming 3991 Firmware G3 15 3590 Firmware G3 15 5590 Firmware G3 3579 Firmware G3 3779 Firmware G5 5000 Firmware G5 5090 Firmware G7 17 7590 Firmware G7 17 7790 Firmware Edge Gateway 3000 Firmware Edge Gateway 5000 Firmware Embedded Box Pc 3000 Firmware Embedded Box Pc 5000 Firmware Inspiron 14 3467 Firmware Inspiron 15 2 In 1 5582 Firmware Inspiron 15 3567 Firmware Inspiron 3277 Firmware Inspiron 3280 Firmware Inspiron 3470 Firmware Inspiron 3471 Firmware Inspiron 3477 Firmware Inspiron 3480 Firmware Inspiron 3481 Firmware Inspiron 3482 Firmware Inspiron 3490 Firmware Inspiron 3493 Firmware Inspiron 3501 Firmware Inspiron 3502 Firmware Inspiron 3580 Firmware Inspiron 3581 Firmware Inspiron 3582 Firmware Inspiron 3590 Firmware Inspiron 3593 Firmware Inspiron 3670 Firmware Inspiron 3671 Firmware Inspiron 3780 Firmware Inspiron 3781 Firmware Inspiron 3782 Firmware Inspiron 3790 Firmware Inspiron 3793 Firmware Inspiron 3880 Firmware Inspiron 3881 Firmware Inspiron 5390 Firmware Inspiron 5391 Firmware Inspiron 5400 Firmware Inspiron 5401 Firmware Inspiron 5477 Firmware Inspiron 5480 Firmware Inspiron 5481 Firmware Inspiron 5482 Firmware Inspiron 5490 Firmware Inspiron 5491 2 In 1 Firmware Inspiron 5493 Firmware Inspiron 5494 Firmware Inspiron 5498 Firmware Latitude 3480 Firmware Latitude 3580 Firmware Inspiron 5491 Aio Firmware Inspiron 5570 Firmware Inspiron 5580 Firmware Inspiron 5583 Firmware Inspiron 5584 Firmware Inspiron 5590 Firmware Inspiron 5591 2 In 1 Firmware Inspiron 5593 Firmware Inspiron 5594 Firmware Inspiron 5598 Firmware Inspiron 5680 Firmware Inspiron 5770 Firmware Inspiron 7000 Firmware Inspiron 7370 Firmware Inspiron 7373 Firmware Inspiron 7380 Firmware Inspiron 7386 Firmware Inspiron 7390 Firmware Inspiron 7391 Firmware Inspiron 7490 Firmware Inspiron 7570 Firmware Inspiron 7573 Firmware Inspiron 7580 Firmware Inspiron 7586 Firmware Inspiron 7590 Firmware Inspiron 7591 Firmware Inspiron 7700 Aio Firmware Inspiron 7777 Firmware Inspiron 7786 Firmware Inspiron 7790 Firmware Inspiron 7791 Firmware Latitude 3120 Firmware Latitude 3180 Firmware Latitude 3189 Firmware Latitude 3190 Firmware Latitude 3190 2 In 1 Firmware Latitude 3300 Firmware Latitude 3301 Firmware Latitude 3310 Firmware Latitude 3310 2 In 1 Firmware Latitude 3379 Firmware Latitude 3390 Firmware Latitude 3490 Firmware Latitude 3590 Firmware Latitude 5280 Firmware Latitude 5285 2 In 1 Firmware Latitude 5289 Firmware Latitude 5290 Firmware Latitude 5290 2 In 1 Firmware Latitude 5300 Firmware Latitude 5300 2 In 1 Firmware Latitude 5310 Firmware Latitude 5310 2 In 1 Firmware Latitude 5400 Firmware Latitude 5401 Firmware Latitude 5410 Firmware Latitude 5411 Firmware Latitude 5414 Rugged Firmware Latitude 5420 Rugged Firmware Latitude 5480 Firmware Latitude 5488 Firmware Latitude 5490 Firmware Latitude 5491 Firmware Latitude 5495 Firmware Latitude 5500 Firmware Latitude 5501 Firmware Latitude 5510 Firmware Latitude 5511 Firmware Latitude 5580 Firmware Latitude 5590 Firmware Latitude 5591 Firmware Latitude 7200 2 In 1 Firmware Latitude 7210 2 In 1 Firmware Latitude 7212 Rugged Extreme Tablet Firmware Latitude 7214 Rugged Extreme Firmware Latitude 7220 Rugged Extreme Tablet Firmware Latitude 7220Ex Rugged Extreme Tablet Firmware Latitude 7275 2 In 1 Firmware Latitude 7290 Firmware Latitude 7300 Firmware Latitude 7310 Firmware Latitude 7370 Firmware Latitude 7380 Firmware Latitude 7389 Firmware Latitude 7390 Firmware Latitude 7390 2 In 1 Firmware Latitude 7400 Firmware Latitude 7400 2 In 1 Firmware Latitude 7410 Firmware Latitude 7414 Rugged Extreme Firmware Latitude 7424 Rugged Extreme Firmware Latitude 7480 Firmware Latitude 7490 Firmware Latitude 9410 Firmware Latitude 9510 Firmware Latitude E5270 Firmware Latitude E5470 Firmware Latitude E5570 Firmware Latitude E7270 Firmware Latitude E7470 Firmware Optiplex 3040 Firmware Optiplex 3046 Firmware Optiplex 3050 Firmware Optiplex 3050 Aio Firmware Optiplex 3060 Firmware Optiplex 3070 Firmware Optiplex 3080 Firmware Optiplex 3090 Firmware Optiplex 3280 Aio Firmware Optiplex 5050 Firmware Optiplex 5055 Firmware Optiplex 5060 Firmware Optiplex 5070 Firmware Optiplex 5080 Firmware Optiplex 5260 All In One Firmware Optiplex 5480 All In One Firmware Optiplex 7040 Firmware Optiplex 7050 Firmware Optiplex 7060 Firmware Optiplex 7070 Firmware Optiplex 7070 Ultra Firmware Optiplex 7071 Firmware Optiplex 7080 Firmware Optiplex 7450 Firmware Optiplex 7460 All In One Firmware Optiplex 7470 All In One Firmware Optiplex 7480 All In One Firmware Optiplex Xe3 Firmware Precision 3240 Compact Firmware Precision 3420 Tower Firmware Precision 3430 Tower Firmware Precision 3431 Tower Firmware Precision 3440 Firmware Precision 3510 Firmware Precision 3520 Firmware Precision 3540 Firmware Precision 3541 Firmware Precision 3550 Firmware Precision 3551 Firmware Precision 3620 Tower Firmware Precision 3630 Tower Firmware Precision 3640 Tower Firmware Precision 3930 Rack Firmware Precision 5510 Firmware Precision 5530 Firmware Precision 5530 2 In 1 Firmware Precision 5540 Firmware Precision 5720 Aio Firmware Precision 5820 Tower Firmware Precision 7510 Firmware Precision 7520 Firmware Precision 7530 Firmware Precision 7540 Firmware Precision 7550 Firmware Precision 7710 Firmware Precision 7720 Firmware Precision 7730 Firmware Precision 7740 Firmware Precision 7750 Firmware Precision 7820 Tower Firmware Precision 7920 Tower Firmware Vostro 3070 Firmware Vostro 3267 Firmware Vostro 3268 Firmware Vostro 3401 Firmware Vostro 3470 Firmware Vostro 3471 Firmware Vostro 3480 Firmware Vostro 3481 Firmware Vostro 3490 Firmware Vostro 3501 Firmware Vostro 3580 Firmware Vostro 3581 Firmware Vostro 3582 Firmware Vostro 3583 Firmware Vostro 3584 Firmware Vostro 3590 Firmware Vostro 3667 Firmware Vostro 3668 Firmware Vostro 3669 Firmware Vostro 3670 Firmware Vostro 3671 Firmware Vostro 3681 Firmware Vostro 3881 Firmware Vostro 3888 Firmware Vostro 5090 Firmware Vostro 5390 Firmware Vostro 5391 Firmware Vostro 5581 Firmware Vostro 5590 Firmware Vostro 5591 Firmware Vostro 5880 Firmware Vostro 7590 Firmware Wyse 5070 Firmware Wyse 5470 Firmware Wyse 5470 All In One Firmware Wyse 7040 Thin Client Firmware Xps 13 7390 Firmware Xps 13 7390 2 In 1 Firmware Xps 13 9300 Firmware Xps 13 9365 2 In 1 Firmware Xps 13 9370 Firmware Xps 13 9380 Firmware Xps 15 7590 Firmware Xps 15 9575 2 In 1 Firmware Xps 7590 Firmware Xps 8930 Firmware Xps 8940 Firmware Xps 8950 Firmware

7.8

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Oct 12, 2022 - 20:15 nvd

HIGH 7.8

DescriptionNVD

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM.

AnalysisAI

Dell Client BIOS contains a Buffer Overflow vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM. Affected products include: Dell Alienware Area 51M R1 Firmware, Dell Alienware Area 51M R2 Firmware, Dell Alienware Aurora R11 Firmware, Dell Alienware Aurora R12 Firmware, Dell Alienware Aurora R13 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

More in Alienware Area 51M R1 Firmware

View all

CVE-2022-32493 HIGH This Week

Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. Rated high severity (CVSS 7.8), this vulnerability is l

CVE-2022-32489 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-32488 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-32487 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-32485 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-24421 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-24420 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-24419 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-24416 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-24415 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2023-28060 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28058 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

Same weakness CWE-119 – Buffer Overflow

View all

CVE-2017-11882 HIGH POC

CVE-2014-6332 HIGH POC

CVE-2023-4966 CRITICAL POC

CVE-2015-2426 HIGH POC

CVE-2013-3918 HIGH POC

CVE-2017-11774 HIGH POC

CVE-2013-3660 HIGH POC

CVE-2017-6736 HIGH POC

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2009-0927 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2017-11882 HIGH POC

CVE-2010-3333 HIGH POC

Share

CVE-2022-32491 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy