#VU70440 Improper access control in Dell products - CVE-2022-34405

 

#VU70440 Improper access control in Dell products - CVE-2022-34405

Published: December 20, 2022


Vulnerability identifier: #VU70440
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2022-34405
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability: No public exploit available
Vulnerable software:
Alienware m15 Ryzen Edition R5
Alienware m15 R6
Dell G5 5090
Dell G5 5000
Alienware Area 51m R2
Dell G7 7500
Dell G7 7700
Alienware x15 R1
Alienware x17 R1
Alienware m15 R1
Alienware m17 R1
Dell Gaming G3 3590
Dell G3 3500
Dell G5 5500
Alienware Area 51m R1
Alienware Aurora R8
Dell G15 5515
Dell G15 5510
Dell G15 5511
Alienware Aurora R10
Alienware Aurora R9
Alienware Aurora R11
Alienware Aurora R12
Alienware m15 R3
Alienware m15 R4
Alienware m17 R3
Alienware m17 R4
Dell G5 5590
Dell G7 7590
Dell G7 7790
Alienware Aurora R13
Alienware m15 R2
Alienware m17 R2
Realtek High Definition Audio Driver
Realtek Audio Console Application
Software vendor:
Dell

Description

The vulnerability allows a local user to escalate privileges on the system

The vulnerability exists due to improper access restrictions. A local user can wait for an administrator to launch the application, attach to this process and execute arbitrary code with elevated privileges.


Remediation

Install updates from vendor's website.

Product Module Update Version Release Date
Alienware m15 Ryzen Edition R5 Realtek High Definition Audio Driver 6.0.9433.1 12-13-2022
Alienware m15 R6 Realtek High Definition Audio Driver 6.0.9400.1 10-20-2022
Dell G5 5090 Realtek High Definition Audio Driver 6.0.9394.1 10-13-2022
Dell G5 5000 Realtek High Definition Audio Driver 6.0.9394.1 10-13-2022
Alienware Area 51m R2 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-19-2022
Dell G7 7500 Realtek High Definition Audio Driver 6.0.9407.1 10-18-2022
Dell G7 7700 Realtek High Definition Audio Driver 6.0.9407.1 10-18-2022
Alienware x15 R1 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9388.1
1.37.275.0
09-12-2022
Alienware x17 R1 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9388.1
1.37.275.0
09-12-2022
Alienware m15 R1 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-13-2022
Alienware m17 R1 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-13-2022
Dell Gaming G3 3590 Realtek High Definition Audio Driver 6.0.9254.1 10-25-2022
Dell G3 3500 Realtek High Definition Audio Driver 6.0.9422.1 10-31-2022
Dell G5 5500 Realtek High Definition Audio Driver 6.0.9422.1 10-31-2022
Alienware Area 51m R1 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-19-2022
Alienware Aurora R8 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-12-2022
Dell G15 5515 Realtek High Definition Audio Driver 6.0.9433.1 12-13-2022
Dell G15 5510 Realtek High Definition Audio Driver 6.0.9400.1 10-27-2022
Dell G15 5511 Realtek High Definition Audio Driver 6.0.9400.1 10-26-2022
Alienware Aurora R10 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-12-2022
Alienware Aurora R9 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-13-2022
Alienware Aurora R11 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-12-2022
Alienware Aurora R12 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-12-2022
Alienware m15 R3 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-19-2022
Alienware m15 R4 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-19-2022
Alienware m17 R3 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-19-2022
Alienware m17 R4 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-19-2022
Dell G5 5590 Realtek High Definition Audio Driver 6.0.9394.1 10-11-2022
Dell G7 7590 Realtek High Definition Audio Driver 6.0.9394.1 10-11-2022
Dell G7 7790 Realtek High Definition Audio Driver 6.0.9394.1 10-11-2022
Alienware Aurora R13 Realtek High Definition Audio Driver 6.0.9388.1 10-12-2022
Alienware m15 R2 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-19-2022
Alienware m17 R2 Realtek High Definition Audio Driver
Realtek Audio Console Application
6.0.9394.1
1.37.275.0
10-19-2022

External links