Design/Logic Flaw

2023-01-1812:15:00

PRIOn knowledge base

www.prio-n.com

dell alienware

bios

design flaw

admin privilege

buffer access vulnerability

smram

4.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM.

CPENameOperatorVersion
alienware_m15_a6_firmwarelt1.4.3
alienware_m15_ryzen_edition_r5_firmwarelt1.8.0
alienware_m17_ryzen_edition_r5_firmwarelt1.4.3
g15_5515_firmwarelt1.8.0
g15_5525_firmwarelt1.4.3
inspiron_3505_firmwarelt1.9.0
inspiron_3515_firmwarelt1.9.0
inspiron_3525_firmwarelt1.5.0
inspiron_3585_firmwarelt1.10.0
inspiron_3595_firmwarelt1.5.0

Name	Operator	Version
alienware_m15_a6_firmware	lt	1.4.3
alienware_m15_ryzen_edition_r5_firmware	lt	1.8.0
alienware_m17_ryzen_edition_r5_firmware	lt	1.4.3
g15_5515_firmware	lt	1.8.0
g15_5525_firmware	lt	1.4.3
inspiron_3505_firmware	lt	1.9.0
inspiron_3515_firmware	lt	1.9.0
inspiron_3525_firmware	lt	1.5.0
inspiron_3585_firmware	lt	1.10.0
inspiron_3595_firmware	lt	1.5.0