CVE-2022-31223
Low
Description
Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by sending unexpected null bytes in order to read memory on the system.
SeverityLow
CVSS2.3
Exploit probability—
ProductDell Chengming 3900 Firmware
PublishedSep 12, 2022
First seenSep 12, 2022
Weakness typeCWE-158CWE-158
How to fix
Update
- dell chengming_3900_firmware1.1.66 or later
- dell inspiron_14_plus_7420_firmware1.2.0 or later
- dell inspiron_16_plus_7620_firmware1.2.0 or later
- dell inspiron_3910_firmware1.1.66 or later
- dell inspiron_5320_firmware1.1.0 or later
- dell inspiron_5420_firmware1.4.1 or later
- dell inspiron_5620_firmware1.4.1 or later
- dell inspiron_7420_firmware1.3.0 or later
- dell inspiron_7620_firmware1.3.0 or later
- dell optiplex_3000_firmware1.1.66 or later
- dell optiplex_3000_thin_client_firmware1.0.7 or later
- dell optiplex_5000_firmware1.3.62 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell chengming_3900_firmware | v < 1.1.66 | 1.1.66 |
| dell inspiron_14_plus_7420_firmware | v < 1.2.0 | 1.2.0 |
| dell inspiron_16_plus_7620_firmware | v < 1.2.0 | 1.2.0 |
| dell inspiron_3910_firmware | v < 1.1.66 | 1.1.66 |
| dell inspiron_5320_firmware | v < 1.1.0 | 1.1.0 |
| dell inspiron_5420_firmware | v < 1.4.1 | 1.4.1 |
| dell inspiron_5620_firmware | v < 1.4.1 | 1.4.1 |
| dell inspiron_7420_firmware | v < 1.3.0 | 1.3.0 |
| dell inspiron_7620_firmware | v < 1.3.0 | 1.3.0 |
| dell optiplex_3000_firmware | v < 1.1.66 | 1.1.66 |
| dell optiplex_3000_thin_client_firmware | v < 1.0.7 | 1.0.7 |
| dell optiplex_5000_firmware | v < 1.3.62 | 1.3.62 |
| dell optiplex_5400_firmware | v < 1.0.13 | 1.0.13 |
| dell optiplex_7000_firmware | v < 1.3.62 | 1.3.62 |
| dell optiplex_7000_oem_firmware | v < 1.3.62 | 1.3.62 |
| dell optiplex_7400_firmware | v < 1.0.13 | 1.0.13 |
| dell precision_3460_small_form_factor_firmware | v < 1.3.62 | 1.3.62 |
| dell precision_3660_tower_firmware | v < 1.3.71 | 1.3.71 |
| dell precision_5770_firmware | v < 1.6.0 | 1.6.0 |
| dell vostro_3710_firmware | v < 1.1.66 | 1.1.66 |
| dell vostro_3910_firmware | v < 1.1.66 | 1.1.66 |
| dell vostro_5320_firmware | v < 1.1.0 | 1.1.0 |
| dell vostro_5620_firmware | v < 1.4.1 | 1.4.1 |
| dell vostro_7620_firmware | v < 1.2.0 | 1.2.0 |
| dell xps_17_9720_firmware | v < 1.6.0 | 1.6.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.