CVE-2022-31225 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2022-31225

Analyzed

More Info Official Page

Source-security_alert@emc.com

Published At-12 Sep, 2022 | 19:15

Updated At-15 Sep, 2022 | 19:11

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the state of the system or cause unexpected failures.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.1	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Secondary	3.1	3.0	LOW	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L

Type: Primary

Version: 3.1

Base score: 5.1

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Type: Secondary

Version: 3.1

Base score: 3.0

Base severity: LOW

Vector:

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L

CPE Matches

>>chengming_3900_firmware>>Versions before 1.1.66(exclusive)

cpe:2.3:o:dell:chengming_3900_firmware:*:*:*:*:*:*:*:*

>>chengming_3900>>-

cpe:2.3:h:dell:chengming_3900:-:*:*:*:*:*:*:*

>>inspiron_14_plus_7420_firmware>>Versions before 1.2.0(exclusive)

cpe:2.3:o:dell:inspiron_14_plus_7420_firmware:*:*:*:*:*:*:*:*

>>inspiron_14_plus_7420>>-

cpe:2.3:h:dell:inspiron_14_plus_7420:-:*:*:*:*:*:*:*

>>inspiron_16_plus_7620_firmware>>Versions before 1.2.0(exclusive)

cpe:2.3:o:dell:inspiron_16_plus_7620_firmware:*:*:*:*:*:*:*:*

>>inspiron_16_plus_7620>>-

cpe:2.3:h:dell:inspiron_16_plus_7620:-:*:*:*:*:*:*:*

>>inspiron_3910_firmware>>Versions before 1.1.66(exclusive)

cpe:2.3:o:dell:inspiron_3910_firmware:*:*:*:*:*:*:*:*

>>inspiron_3910>>-

cpe:2.3:h:dell:inspiron_3910:-:*:*:*:*:*:*:*

>>inspiron_5320_firmware>>Versions before 1.1.0(exclusive)

cpe:2.3:o:dell:inspiron_5320_firmware:*:*:*:*:*:*:*:*

>>inspiron_5320>>-

cpe:2.3:h:dell:inspiron_5320:-:*:*:*:*:*:*:*

>>inspiron_5420_firmware>>Versions before 1.4.1(exclusive)

cpe:2.3:o:dell:inspiron_5420_firmware:*:*:*:*:*:*:*:*

>>inspiron_5420>>-

cpe:2.3:h:dell:inspiron_5420:-:*:*:*:*:*:*:*

>>inspiron_5620_firmware>>Versions before 1.4.1(exclusive)

cpe:2.3:o:dell:inspiron_5620_firmware:*:*:*:*:*:*:*:*

>>inspiron_5620>>-

cpe:2.3:h:dell:inspiron_5620:-:*:*:*:*:*:*:*

>>inspiron_7420_firmware>>Versions before 1.3.0(exclusive)

cpe:2.3:o:dell:inspiron_7420_firmware:*:*:*:*:*:*:*:*

>>inspiron_7420>>-

cpe:2.3:h:dell:inspiron_7420:-:*:*:*:*:*:*:*

>>inspiron_7620_firmware>>Versions before 1.3.0(exclusive)

cpe:2.3:o:dell:inspiron_7620_firmware:*:*:*:*:*:*:*:*

>>inspiron_7620>>-

cpe:2.3:h:dell:inspiron_7620:-:*:*:*:*:*:*:*

>>optiplex_3000_firmware>>Versions before 1.1.66(exclusive)

cpe:2.3:o:dell:optiplex_3000_firmware:*:*:*:*:*:*:*:*

>>optiplex_3000>>-

cpe:2.3:h:dell:optiplex_3000:-:*:*:*:*:*:*:*

>>optiplex_3000_thin_client_firmware>>Versions before 1.0.7(exclusive)

cpe:2.3:o:dell:optiplex_3000_thin_client_firmware:*:*:*:*:*:*:*:*

>>optiplex_3000_thin_client>>-

cpe:2.3:h:dell:optiplex_3000_thin_client:-:*:*:*:*:*:*:*

>>optiplex_5000_firmware>>Versions before 1.3.62(exclusive)

cpe:2.3:o:dell:optiplex_5000_firmware:*:*:*:*:*:*:*:*

>>optiplex_5000>>-

cpe:2.3:h:dell:optiplex_5000:-:*:*:*:*:*:*:*

>>optiplex_5400_firmware>>Versions before 1.0.13(exclusive)

cpe:2.3:o:dell:optiplex_5400_firmware:*:*:*:*:*:*:*:*

>>optiplex_5400>>-

cpe:2.3:h:dell:optiplex_5400:-:*:*:*:*:*:*:*

>>optiplex_7000_firmware>>Versions before 1.3.62(exclusive)

cpe:2.3:o:dell:optiplex_7000_firmware:*:*:*:*:*:*:*:*

>>optiplex_7000>>-

cpe:2.3:h:dell:optiplex_7000:-:*:*:*:*:*:*:*

>>optiplex_7000_oem_firmware>>Versions before 1.3.62(exclusive)

cpe:2.3:o:dell:optiplex_7000_oem_firmware:*:*:*:*:*:*:*:*

>>optiplex_7000_oem>>-

cpe:2.3:h:dell:optiplex_7000_oem:-:*:*:*:*:*:*:*

>>optiplex_7400_firmware>>Versions before 1.0.13(exclusive)

cpe:2.3:o:dell:optiplex_7400_firmware:*:*:*:*:*:*:*:*

>>optiplex_7400>>-

cpe:2.3:h:dell:optiplex_7400:-:*:*:*:*:*:*:*

>>precision_3460_small_form_factor_firmware>>Versions before 1.3.62(exclusive)

cpe:2.3:o:dell:precision_3460_small_form_factor_firmware:*:*:*:*:*:*:*:*

>>precision_3460_small_form_factor>>-

cpe:2.3:h:dell:precision_3460_small_form_factor:-:*:*:*:*:*:*:*

>>precision_3660_tower_firmware>>Versions before 1.3.71(exclusive)

cpe:2.3:o:dell:precision_3660_tower_firmware:*:*:*:*:*:*:*:*

>>precision_3660_tower>>-

cpe:2.3:h:dell:precision_3660_tower:-:*:*:*:*:*:*:*

>>precision_5770_firmware>>Versions before 1.6.0(exclusive)

cpe:2.3:o:dell:precision_5770_firmware:*:*:*:*:*:*:*:*

>>precision_5770>>-

cpe:2.3:h:dell:precision_5770:-:*:*:*:*:*:*:*

>>vostro_3710_firmware>>Versions before 1.1.66(exclusive)

cpe:2.3:o:dell:vostro_3710_firmware:*:*:*:*:*:*:*:*

>>vostro_3710>>-

cpe:2.3:h:dell:vostro_3710:-:*:*:*:*:*:*:*

>>vostro_3910_firmware>>Versions before 1.1.66(exclusive)

cpe:2.3:o:dell:vostro_3910_firmware:*:*:*:*:*:*:*:*

>>vostro_3910>>-

cpe:2.3:h:dell:vostro_3910:-:*:*:*:*:*:*:*

>>vostro_5320_firmware>>Versions before 1.1.0(exclusive)

cpe:2.3:o:dell:vostro_5320_firmware:*:*:*:*:*:*:*:*

>>vostro_5320>>-

cpe:2.3:h:dell:vostro_5320:-:*:*:*:*:*:*:*

>>vostro_5620_firmware>>Versions before 1.4.1(exclusive)

cpe:2.3:o:dell:vostro_5620_firmware:*:*:*:*:*:*:*:*

>>vostro_5620>>-

cpe:2.3:h:dell:vostro_5620:-:*:*:*:*:*:*:*

>>vostro_7620_firmware>>Versions before 1.2.0(exclusive)

cpe:2.3:o:dell:vostro_7620_firmware:*:*:*:*:*:*:*:*

>>vostro_7620>>-

cpe:2.3:h:dell:vostro_7620:-:*:*:*:*:*:*:*

>>xps_17_9720_firmware>>Versions before 1.6.0(exclusive)

cpe:2.3:o:dell:xps_17_9720_firmware:*:*:*:*:*:*:*:*

>>xps_17_9720>>-

cpe:2.3:h:dell:xps_17_9720:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-252	Primary	nvd@nist.gov
CWE-252	Secondary	security_alert@emc.com

CWE ID: CWE-252

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-252

Type: Secondary

Source: security_alert@emc.com

References

Hyperlink	Source	Resource
https://www.dell.com/support/kbdoc/000202196	security_alert@emc.com	Patch Vendor Advisory

Hyperlink: https://www.dell.com/support/kbdoc/000202196

Source: security_alert@emc.com

Resource:

Patch

Vendor Advisory