CVE-2022-31223

Published: Sep 12, 2022Modified: Jun 17, 2026

2.3

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Exploitability: 0.8 / Impact: 1.4

Source: NVD

Description

Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by sending unexpected null bytes in order to read memory on the system.

Affected (25)

Dell

25 products

Chengming 3900 Firmware

Inspiron 14 Plus 7420 Firmware

Inspiron 16 Plus 7620 Firmware

Inspiron 3910 Firmware

Inspiron 5320 Firmware

Inspiron 5420 Firmware

Inspiron 5620 Firmware

Inspiron 7420 Firmware

Inspiron 7620 Firmware

Optiplex 3000 Firmware

Optiplex 3000 Thin Client Firmware

Optiplex 5000 Firmware

Optiplex 5400 Firmware

Optiplex 7000 Firmware

Optiplex 7000 Oem Firmware

Optiplex 7400 Firmware

Precision 3460 Small Form Factor Firmware

Precision 3660 Tower Firmware

Precision 5770 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Chengming 3900 Firmware	Before 1.1.66

Running on/with	Platform Versions
Dell Chengming 3900	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 14 Plus 7420 Firmware	Before 1.2.0

Running on/with	Platform Versions
Dell Inspiron 14 Plus 7420	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 16 Plus 7620 Firmware	Before 1.2.0

Running on/with	Platform Versions
Dell Inspiron 16 Plus 7620	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3910 Firmware	Before 1.1.66

Running on/with	Platform Versions
Dell Inspiron 3910	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5320 Firmware	Before 1.1.0

Running on/with	Platform Versions
Dell Inspiron 5320	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5420 Firmware	Before 1.4.1

Running on/with	Platform Versions
Dell Inspiron 5420	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5620 Firmware	Before 1.4.1

Running on/with	Platform Versions
Dell Inspiron 5620	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 7420 Firmware	Before 1.3.0

Running on/with	Platform Versions
Dell Inspiron 7420	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 7620 Firmware	Before 1.3.0

Running on/with	Platform Versions
Dell Inspiron 7620	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 3000 Firmware	Before 1.1.66

Running on/with	Platform Versions
Dell Optiplex 3000	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 3000 Thin Client Firmware	Before 1.0.7

Running on/with	Platform Versions
Dell Optiplex 3000 Thin Client	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 5000 Firmware	Before 1.3.62

Running on/with	Platform Versions
Dell Optiplex 5000	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 5400 Firmware	Before 1.0.13

Running on/with	Platform Versions
Dell Optiplex 5400	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 7000 Firmware	Before 1.3.62

Running on/with	Platform Versions
Dell Optiplex 7000	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 7000 Oem Firmware	Before 1.3.62

Running on/with	Platform Versions
Dell Optiplex 7000 Oem	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 7400 Firmware	Before 1.0.13

Running on/with	Platform Versions
Dell Optiplex 7400	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 3460 Small Form Factor Firmware	Before 1.3.62

Running on/with	Platform Versions
Dell Precision 3460 Small Form Factor	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 3660 Tower Firmware	Before 1.3.71

Running on/with	Platform Versions
Dell Precision 3660 Tower	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 5770 Firmware	Before 1.6.0

Running on/with	Platform Versions
Dell Precision 5770	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 3710 Firmware	Before 1.1.66

Running on/with	Platform Versions
Dell Vostro 3710	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 3910 Firmware	Before 1.1.66

Running on/with	Platform Versions
Dell Vostro 3910	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 5320 Firmware	Before 1.1.0

Running on/with	Platform Versions
Dell Vostro 5320	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 5620 Firmware	Before 1.4.1

Running on/with	Platform Versions
Dell Vostro 5620	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 7620 Firmware	Before 1.2.0

Running on/with	Platform Versions
Dell Vostro 7620	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xps 17 9720 Firmware	Before 1.6.0

Running on/with	Platform Versions
Dell Xps 17 9720	All versions

Related CWEs

CWE-158

Improper Neutralization of Null Byte or NUL Character

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes NUL characters or null bytes when they are sent to a downstream component.

References (2)

https://www.dell.com/support/kbdoc/000202196

Source: security_alert@emc.com

PatchVendor Advisory

https://www.dell.com/support/kbdoc/000202196

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.