Medium WID-SEC-2023-0341 20 CVEs

Dell PowerEdge: Mehrere Schwachstellen

Published Feb 12, 2023 · Updated Feb 12, 2023 · de-DE

Vendor: Dell Product: PowerEdge Product: PowerEdge < 1.16.0 Product: PowerEdge < 1.19.0 Product: PowerEdge < 1.4.2 Product: PowerEdge < 1.8.2 Product: PowerEdge < 2.11.0 Product: PowerEdge < 2.11.1 Product: PowerEdge < 2.16.0 Product: PowerEdge < 2.16.1 Product: PowerEdge < 2.9.3 Product: PowerEdge < 2.9.4

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Dell PowerEdge ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.

Product

PowerEdge ist der Markenname für Server des Herstellers Dell.

Vulnerabilities 20

High 7.5

CVE-2022-34406

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34407

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34408

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34409

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34410

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34411

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34412

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34413

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34414

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34415

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34416

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34417

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34418

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34419

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34420

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34421

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34422

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
High 7.5

CVE-2022-34423

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Mar 16, 2023
Low 3.9

CVE-2022-34376

Dell PowerEdge BIOS and Dell Precision BIOS contain an improper input validation vulnerability. A local authenticated m…

Dell PowerEdge Platform

Feb 10, 2023
Low 1.9

CVE-2022-34377

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A …

Dell PowerEdge Platform

Feb 10, 2023

Revision history

2023-02-12 #1
Initiale Fassung

References

Dell Security Advisory vom 2023-02-12
https://www.dell.com/support/kbdoc/de-de/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability