Threat Investigation
Request a demo

CVE-2022-31220

Low

Description

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the state of the system or cause unexpected failures.

SeverityLow
CVSS3.0
Exploit probability—
ProductDell Chengming 3900 Firmware
PublishedSep 12, 2022
First seenSep 12, 2022
Weakness typeCWE-1038CWE-1038

How to fix

Update
  • dell chengming_3900_firmware1.1.66 or later
  • dell inspiron_14_plus_7420_firmware1.2.0 or later
  • dell inspiron_16_plus_7620_firmware1.2.0 or later
  • dell inspiron_3910_firmware1.1.66 or later
  • dell inspiron_5320_firmware1.1.0 or later
  • dell inspiron_5420_firmware1.4.1 or later
  • dell inspiron_5620_firmware1.4.1 or later
  • dell inspiron_7420_firmware1.3.0 or later
  • dell inspiron_7620_firmware1.3.0 or later
  • dell optiplex_3000_firmware1.1.66 or later
  • dell optiplex_3000_thin_client_firmware1.0.7 or later
  • dell optiplex_5000_firmware1.3.62 or later

Affected products

ProductAffected versionsFixed in
dell chengming_3900_firmwarev < 1.1.661.1.66
dell inspiron_14_plus_7420_firmwarev < 1.2.01.2.0
dell inspiron_16_plus_7620_firmwarev < 1.2.01.2.0
dell inspiron_3910_firmwarev < 1.1.661.1.66
dell inspiron_5320_firmwarev < 1.1.01.1.0
dell inspiron_5420_firmwarev < 1.4.11.4.1
dell inspiron_5620_firmwarev < 1.4.11.4.1
dell inspiron_7420_firmwarev < 1.3.01.3.0
dell inspiron_7620_firmwarev < 1.3.01.3.0
dell optiplex_3000_firmwarev < 1.1.661.1.66
dell optiplex_3000_thin_client_firmwarev < 1.0.71.0.7
dell optiplex_5000_firmwarev < 1.3.621.3.62
dell optiplex_5400_firmwarev < 1.0.131.0.13
dell optiplex_7000_firmwarev < 1.3.621.3.62
dell optiplex_7000_oem_firmwarev < 1.3.621.3.62
dell optiplex_7400_firmwarev < 1.0.131.0.13
dell precision_3460_small_form_factor_firmwarev < 1.3.621.3.62
dell precision_3660_tower_firmwarev < 1.3.711.3.71
dell precision_5770_firmwarev < 1.6.01.6.0
dell vostro_3710_firmwarev < 1.1.661.1.66
dell vostro_3910_firmwarev < 1.1.661.1.66
dell vostro_5320_firmwarev < 1.1.01.1.0
dell vostro_5620_firmwarev < 1.4.11.4.1
dell vostro_7620_firmwarev < 1.2.01.2.0
dell xps_17_9720_firmwarev < 1.6.01.6.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.