CVE-2022-31221 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2022-31221

Analyzed

More Info Official Page

Source-security_alert@emc.com

Published At-12 Sep, 2022 | 19:15

Updated At-15 Sep, 2022 | 19:46

Dell BIOS versions contain an Information Exposure vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order access sensitive state information on the system.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	2.3	LOW	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Secondary	3.1	2.3	LOW	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Type: Primary

Version: 3.1

Base score: 2.3

Base severity: LOW

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 2.3

Base severity: LOW

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

CPE Matches

>>chengming_3900_firmware>>Versions before 1.1.66(exclusive)

cpe:2.3:o:dell:chengming_3900_firmware:*:*:*:*:*:*:*:*

>>chengming_3900>>-

cpe:2.3:h:dell:chengming_3900:-:*:*:*:*:*:*:*

>>inspiron_14_plus_7420_firmware>>Versions before 1.2.0(exclusive)

cpe:2.3:o:dell:inspiron_14_plus_7420_firmware:*:*:*:*:*:*:*:*

>>inspiron_14_plus_7420>>-

cpe:2.3:h:dell:inspiron_14_plus_7420:-:*:*:*:*:*:*:*

>>inspiron_16_plus_7620_firmware>>Versions before 1.2.0(exclusive)

cpe:2.3:o:dell:inspiron_16_plus_7620_firmware:*:*:*:*:*:*:*:*

>>inspiron_16_plus_7620>>-

cpe:2.3:h:dell:inspiron_16_plus_7620:-:*:*:*:*:*:*:*

>>inspiron_3910_firmware>>Versions before 1.1.66(exclusive)

cpe:2.3:o:dell:inspiron_3910_firmware:*:*:*:*:*:*:*:*

>>inspiron_3910>>-

cpe:2.3:h:dell:inspiron_3910:-:*:*:*:*:*:*:*

>>inspiron_5320_firmware>>Versions before 1.1.0(exclusive)

cpe:2.3:o:dell:inspiron_5320_firmware:*:*:*:*:*:*:*:*

>>inspiron_5320>>-

cpe:2.3:h:dell:inspiron_5320:-:*:*:*:*:*:*:*

>>inspiron_5420_firmware>>Versions before 1.4.1(exclusive)

cpe:2.3:o:dell:inspiron_5420_firmware:*:*:*:*:*:*:*:*

>>inspiron_5420>>-

cpe:2.3:h:dell:inspiron_5420:-:*:*:*:*:*:*:*

>>inspiron_5620_firmware>>Versions before 1.4.1(exclusive)

cpe:2.3:o:dell:inspiron_5620_firmware:*:*:*:*:*:*:*:*

>>inspiron_5620>>-

cpe:2.3:h:dell:inspiron_5620:-:*:*:*:*:*:*:*

>>inspiron_7420_firmware>>Versions before 1.3.0(exclusive)

cpe:2.3:o:dell:inspiron_7420_firmware:*:*:*:*:*:*:*:*

>>inspiron_7420>>-

cpe:2.3:h:dell:inspiron_7420:-:*:*:*:*:*:*:*

>>inspiron_7620_firmware>>Versions before 1.3.0(exclusive)

cpe:2.3:o:dell:inspiron_7620_firmware:*:*:*:*:*:*:*:*

>>inspiron_7620>>-

cpe:2.3:h:dell:inspiron_7620:-:*:*:*:*:*:*:*

>>optiplex_3000_firmware>>Versions before 1.1.66(exclusive)

cpe:2.3:o:dell:optiplex_3000_firmware:*:*:*:*:*:*:*:*

>>optiplex_3000>>-

cpe:2.3:h:dell:optiplex_3000:-:*:*:*:*:*:*:*

>>optiplex_3000_thin_client_firmware>>Versions before 1.0.7(exclusive)

cpe:2.3:o:dell:optiplex_3000_thin_client_firmware:*:*:*:*:*:*:*:*

>>optiplex_3000_thin_client>>-

cpe:2.3:h:dell:optiplex_3000_thin_client:-:*:*:*:*:*:*:*

>>optiplex_5000_firmware>>Versions before 1.3.62(exclusive)

cpe:2.3:o:dell:optiplex_5000_firmware:*:*:*:*:*:*:*:*

>>optiplex_5000>>-

cpe:2.3:h:dell:optiplex_5000:-:*:*:*:*:*:*:*

>>optiplex_5400_firmware>>Versions before 1.0.13(exclusive)

cpe:2.3:o:dell:optiplex_5400_firmware:*:*:*:*:*:*:*:*

>>optiplex_5400>>-

cpe:2.3:h:dell:optiplex_5400:-:*:*:*:*:*:*:*

>>optiplex_7000_firmware>>Versions before 1.3.62(exclusive)

cpe:2.3:o:dell:optiplex_7000_firmware:*:*:*:*:*:*:*:*

>>optiplex_7000>>-

cpe:2.3:h:dell:optiplex_7000:-:*:*:*:*:*:*:*

>>optiplex_7000_oem_firmware>>Versions before 1.3.62(exclusive)

cpe:2.3:o:dell:optiplex_7000_oem_firmware:*:*:*:*:*:*:*:*

>>optiplex_7000_oem>>-

cpe:2.3:h:dell:optiplex_7000_oem:-:*:*:*:*:*:*:*

>>optiplex_7400_firmware>>Versions before 1.0.13(exclusive)

cpe:2.3:o:dell:optiplex_7400_firmware:*:*:*:*:*:*:*:*

>>optiplex_7400>>-

cpe:2.3:h:dell:optiplex_7400:-:*:*:*:*:*:*:*

>>precision_3460_small_form_factor_firmware>>Versions before 1.3.62(exclusive)

cpe:2.3:o:dell:precision_3460_small_form_factor_firmware:*:*:*:*:*:*:*:*

>>precision_3460_small_form_factor>>-

cpe:2.3:h:dell:precision_3460_small_form_factor:-:*:*:*:*:*:*:*

>>precision_3660_tower_firmware>>Versions before 1.3.71(exclusive)

cpe:2.3:o:dell:precision_3660_tower_firmware:*:*:*:*:*:*:*:*

>>precision_3660_tower>>-

cpe:2.3:h:dell:precision_3660_tower:-:*:*:*:*:*:*:*

>>precision_5770_firmware>>Versions before 1.6.0(exclusive)

cpe:2.3:o:dell:precision_5770_firmware:*:*:*:*:*:*:*:*

>>precision_5770>>-

cpe:2.3:h:dell:precision_5770:-:*:*:*:*:*:*:*

>>vostro_3710_firmware>>Versions before 1.1.66(exclusive)

cpe:2.3:o:dell:vostro_3710_firmware:*:*:*:*:*:*:*:*

>>vostro_3710>>-

cpe:2.3:h:dell:vostro_3710:-:*:*:*:*:*:*:*

>>vostro_3910_firmware>>Versions before 1.1.66(exclusive)

cpe:2.3:o:dell:vostro_3910_firmware:*:*:*:*:*:*:*:*

>>vostro_3910>>-

cpe:2.3:h:dell:vostro_3910:-:*:*:*:*:*:*:*

>>vostro_5320_firmware>>Versions before 1.1.0(exclusive)

cpe:2.3:o:dell:vostro_5320_firmware:*:*:*:*:*:*:*:*

>>vostro_5320>>-

cpe:2.3:h:dell:vostro_5320:-:*:*:*:*:*:*:*

>>vostro_5620_firmware>>Versions before 1.4.1(exclusive)

cpe:2.3:o:dell:vostro_5620_firmware:*:*:*:*:*:*:*:*

>>vostro_5620>>-

cpe:2.3:h:dell:vostro_5620:-:*:*:*:*:*:*:*

>>vostro_7620_firmware>>Versions before 1.2.0(exclusive)

cpe:2.3:o:dell:vostro_7620_firmware:*:*:*:*:*:*:*:*

>>vostro_7620>>-

cpe:2.3:h:dell:vostro_7620:-:*:*:*:*:*:*:*

>>xps_17_9720_firmware>>Versions before 1.6.0(exclusive)

cpe:2.3:o:dell:xps_17_9720_firmware:*:*:*:*:*:*:*:*

>>xps_17_9720>>-

cpe:2.3:h:dell:xps_17_9720:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-200	Primary	nvd@nist.gov
CWE-200	Secondary	security_alert@emc.com

CWE ID: CWE-200

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-200

Type: Secondary

Source: security_alert@emc.com

References

Hyperlink	Source	Resource
https://www.dell.com/support/kbdoc/000202196	security_alert@emc.com	Patch Vendor Advisory

Hyperlink: https://www.dell.com/support/kbdoc/000202196

Source: security_alert@emc.com

Resource:

Patch

Vendor Advisory