Out-of-bounds read in Integrated Sensor Solution - CVE-2022-30339

Vulnerability identifier: #VU72502

CSH Severity: Low

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-30339

CWE-ID: CWE-125

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in firmware. A local administrator can trigger an out-of-bounds read error and cause a denial of service condition on the system.

Integrated Sensor Solution
Vostro 5310
Inspiron 5310
Latitude 3330
XPS 13 9315 2-in-1
XPS 13 9315
Latitude 3530
Vostro 5320
Inspiron 5320
Latitude 3430
Inspiron 7420
Precision 7670
Inspiron 14 Plus 7420
Inspiron 16 Plus 7620
Precision 7770
Inspiron 7620
Vostro 7620
Alienware x14
Precision 3570
Latitude 5330
XPS 15 9520
Precision 5570
Precision 5470
Vostro 5620
Latitude 7330
Latitude 7430
Latitude 7530
Inspiron 5420
Alienware x17 R2
Inspiron 5620
Alienware x15 R2
Precision 3571
Latitude 5531
Latitude 5431
Precision 3470
Latitude 5530
Latitude 5430
XPS 13 9320
XPS 17 9720
Precision 5770
Inspiron 7510
Inspiron 7610
Vostro 7510
Inspiron 7500 2-in-1 Black
Alienware x15 R1
Inspiron 7300 2-in-1
Alienware x17 R1
Alienware m15 R4
Alienware m17 R4
XPS 15 9510
Precision 5760
XPS 17 9710
Precision 5560
Latitude 9510
Latitude 5421
Latitude 5310 2-IN-1
Latitude 9420
Latitude 5521
Inspiron 5300
Latitude 3320
Latitude 7320 Detachable
Latitude 7210 2-in-1
Vostro 5300
Precision 3561
Latitude 9520
XPS 15 9500
Precision 5550
Inspiron 7501
Inspiron 7500
Latitude 9410
Vostro 7500
Inspiron 5509
Inspiron 5502
Inspiron 5409
Inspiron 5402
Vostro 5402
Vostro 5502
Precision 7550
Latitude 3410
Latitude 7310
Latitude 3510
Latitude 7410
Inspiron 7706 2-in-1
Inspiron 7506 2-in-1
Dell G7 17 7700
Inspiron 7306 2-in-1
Inspiron 5406 2-in-1
Dell G7 15 7500
Precision 7750
Precision 5750
XPS 17 9700
Dell G5 15 (5500)
Dell G3 3500
Alienware m17 R3
Alienware m15 R3
Latitude 7420
Inspiron 5301
Latitude 7320
Vostro 5301
Latitude 7520
Inspiron 7300
Inspiron 7400
Latitude 5420
Latitude 5520
Precision 3560
Latitude 5320
Latitude 3520
Latitude 3420
XPS 13 9310 2-in-1
Inspiron 14 5410 2-in-1
Vostro 5510
Vostro 5410
Inspiron 5510
XPS 13 9310
Latitute 5421

Install updates from vendor's website.

Integrated Sensor Solution - addressed in versions 5.0.0.4143, 5.4.1.4479, 5.4.2.4579v3
Vostro 5310 - addressed in versions Pending, 2.17.0
Inspiron 5310 - addressed in versions Pending, 2.17.0
Latitude 3330 - addressed in versions Pending, 3.10.100.4572
XPS 13 9315 2-in-1 - addressed in versions 1.4.0, 3.10.100.4572
XPS 13 9315 - addressed in versions 1.6.1, 3.10.100.4572
Latitude 3530 - addressed in versions 1.7.0, 3.10.100.4572
Vostro 5320 - addressed in versions 1.7.0, 3.10.100.4572
Inspiron 5320 - addressed in versions 1.7.0, 3.10.100.4572
Latitude 3430 - addressed in versions 1.7.0, 3.10.100.4572
Inspiron 7420 - addressed in versions 1.8.0, 3.10.100.4572
Precision 7670 - addressed in versions 1.8.0, 3.10.100.4572
Inspiron 14 Plus 7420 - addressed in versions 1.8.0, 3.10.100.4572
Inspiron 16 Plus 7620 - addressed in versions 1.8.0, 3.10.100.4572
Precision 7770 - addressed in versions 1.8.0, 3.10.100.4572
Inspiron 7620 - addressed in versions 1.8.0, 3.10.100.4572
Vostro 7620 - addressed in versions 1.8.0, 3.10.100.4572
Alienware x14 - addressed in versions 1.9.0, 3.1.0.4572
Precision 3570 - addressed in versions 1.9.0, 3.10.100.4572
Latitude 5330 - addressed in versions 1.9.0, 3.10.100.4572
XPS 15 9520 - addressed in versions 1.9.1, 3.10.100.4572
Precision 5570 - addressed in versions 1.9.1, 3.10.100.4572
Precision 5470 - addressed in versions 1.9.1, 3.10.100.4572
Vostro 5620 - addressed in versions 1.10.0, 3.10.100.4572
Latitude 7330 - addressed in versions 1.10.0, 3.10.100.4572
Latitude 7430 - addressed in versions 1.10.0, 3.10.100.4572
Latitude 7530 - addressed in versions 1.10.0, 3.10.100.4572
Inspiron 5420 - addressed in versions 1.10.0, 3.10.100.4572
Alienware x17 R2 - addressed in versions 1.10.0, 3.1.0.4572
Inspiron 5620 - addressed in versions 1.10.0, 3.10.100.4572
Alienware x15 R2 - addressed in versions 1.10.0, 3.1.0.4572
Precision 3571 - addressed in versions 1.10.0, 3.10.100.4572
Latitude 5531 - addressed in versions 1.10.0, 3.10.100.4572
Latitude 5431 - addressed in versions 1.10.1, 3.10.100.4572
Precision 3470 - addressed in versions 1.10.1, 3.10.100.4572
Latitude 5530 - addressed in versions 1.11.0, 3.10.100.4572
Latitude 5430 - addressed in versions 1.11.0, 3.10.100.4572
XPS 13 9320 - addressed in versions 1.11.0, 3.10.100.4572
XPS 17 9720 - addressed in versions 1.13.1, 3.10.100.4572
Precision 5770 - addressed in versions 1.13.1, 3.10.100.4572
Inspiron 7510 - addressed in versions 1.14.0, 3.10.100.4477
Inspiron 7610 - addressed in versions 1.14.0, 3.10.100.4477
Vostro 7510 - addressed in versions 1.14.0, 3.10.100.4477
Inspiron 7500 2-in-1 Black - addressed in versions 1.16.0, 3.10.100.4140
Alienware x15 R1 - addressed in versions 1.16.0, 3.1.0.4477
Inspiron 7300 2-in-1 - addressed in versions 1.16.0, 3.10.100.4140
Alienware x17 R1 - addressed in versions 1.16.0, 3.1.0.4477
Alienware m15 R4 - addressed in versions 1.16.2, 3.1.0.4140
Alienware m17 R4 - addressed in versions 1.16.2, 3.1.0.4140
XPS 15 9510 - addressed in versions 1.17.0, 3.10.100.4477
Precision 5760 - addressed in versions 1.17.0, 3.10.100.4477
XPS 17 9710 - addressed in versions 1.17.0, 3.10.100.4477
Precision 5560 - addressed in versions 1.17.0, 3.10.100.4477
Latitude 9510 - addressed in versions 1.17.1, 3.10.100.4140
Latitude 5421 - update to 1.18.0
Latitude 5310 2-IN-1 - addressed in versions 1.18.0, 3.10.100.4140
Latitude 9420 - addressed in versions 1.18.0, 3.10.100.4477
Latitude 5521 - addressed in versions 1.19.0, 3.10.100.4477
Inspiron 5300 - addressed in versions 1.19.0, 3.10.100.4140
Latitude 3320 - addressed in versions 1.19.0, 3.10.100.4477
Latitude 7320 Detachable - addressed in versions 1.19.0, 3.10.100.4477
Latitude 7210 2-in-1 - addressed in versions 1.19.0, 3.10.100.4140
Vostro 5300 - addressed in versions 1.19.0, 3.10.100.4140
Precision 3561 - addressed in versions 1.19.0, 3.10.100.4477
Latitude 9520 - addressed in versions 1.19.1, 3.10.100.4477
XPS 15 9500 - addressed in versions 1.20.0, 3.10.100.4140
Precision 5550 - addressed in versions 1.20.0, 3.10.100.4140
Inspiron 7501 - addressed in versions 1.20.0, 3.10.100.4140
Inspiron 7500 - addressed in versions 1.20.0, 3.10.100.4140
Latitude 9410 - addressed in versions 1.20.0, 3.10.100.4140
Vostro 7500 - addressed in versions 1.20.0, 3.10.100.4140
Inspiron 5509 - addressed in versions 1.20.1, 3.10.100.4477
Inspiron 5502 - addressed in versions 1.20.1, 3.10.100.4477
Inspiron 5409 - addressed in versions 1.20.1, 3.10.100.4477
Inspiron 5402 - addressed in versions 1.20.1, 3.10.100.4477
Vostro 5402 - addressed in versions 1.20.1, 3.10.100.4477
Vostro 5502 - addressed in versions 1.20.1, 3.10.100.4477
Precision 7550 - addressed in versions 1.21.0, 3.10.100.4140
Latitude 3410 - addressed in versions 1.21.0, 3.10.100.4140
Latitude 7310 - addressed in versions 1.21.0, 3.10.100.4140
Latitude 3510 - addressed in versions 1.21.0, 3.10.100.4140
Latitude 7410 - addressed in versions 1.21.0, 3.10.100.4140
Inspiron 7706 2-in-1 - addressed in versions 1.21.0, 3.10.100.4477
Inspiron 7506 2-in-1 - addressed in versions 1.21.0, 3.10.100.4477
Dell G7 17 7700 - addressed in versions 1.21.0, 3.10.100.4140
Inspiron 7306 2-in-1 - addressed in versions 1.21.0, 3.10.100.4477
Inspiron 5406 2-in-1 - addressed in versions 1.21.0, 3.10.100.4477
Dell G7 15 7500 - addressed in versions 1.21.0, 3.10.100.4140
Precision 7750 - addressed in versions 1.21.0, 3.10.100.4140
Precision 5750 - addressed in versions 1.22.1, 3.10.100.4140
XPS 17 9700 - addressed in versions 1.22.1, 3.10.100.4140
Dell G5 15 (5500) - addressed in versions 1.22.2, 3.10.100.4140
Dell G3 3500 - addressed in versions 1.22.2, 3.10.100.4140
Alienware m17 R3 - addressed in versions 1.22.2, 3.1.0.4140
Alienware m15 R3 - addressed in versions 1.22.2, 3.1.0.4140
Latitude 7420 - addressed in versions 1.23.1, 3.10.100.4477
Inspiron 5301 - addressed in versions 1.23.1, 3.10.100.4477
Latitude 7320 - addressed in versions 1.23.1, 3.10.100.4477
Vostro 5301 - addressed in versions 1.23.1, 3.10.100.4477
Latitude 7520 - addressed in versions 1.23.1, 3.10.100.4477
Inspiron 7300 - addressed in versions 1.23.1, 3.10.100.4477
Inspiron 7400 - addressed in versions 1.23.1, 3.10.100.4477
Latitude 5420 - addressed in versions 1.25.0, 3.10.100.4477
Latitude 5520 - addressed in versions 1.25.1, 3.10.100.4477
Precision 3560 - addressed in versions 1.25.1, 3.10.100.4477
Latitude 5320 - addressed in versions 1.25.1, 3.10.100.4477
Latitude 3520 - addressed in versions 1.25.1, 3.10.100.4477
Latitude 3420 - addressed in versions 1.25.1, 3.10.100.4477
XPS 13 9310 2-in-1 - addressed in versions 2.15.0, 3.10.100.4477
Inspiron 14 5410 2-in-1 - addressed in versions 2.16.0, 2.17.0, 3.10.100.4477
Vostro 5510 - addressed in versions 2.16.0, 3.10.100.4477
Vostro 5410 - addressed in versions 2.16.0, 3.10.100.4477
Inspiron 5510 - addressed in versions 2.16.0, 3.10.100.4477
XPS 13 9310 - addressed in versions 3.10.100.4477, 3.12.1
Latitute 5421 - update to 3.10.100.4477

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00721.html

• Denial of service in Intel Integrated Sensor Solution
• Dell client platform security update for Intel Integrated Sensor Solution