Lucene search

[email protected]CVE-2022-31224

HistorySep 12, 2022 - 7:15 p.m.

CVE-2022-31224

2022-09-1219:15:09

CWE-1247

[email protected]

web.nvd.nist.gov

dell

bios

vulnerability

cve-2022-31224

physical access

exploit

2.4 Low

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

3.8 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.0%

JSON

Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by triggering a fault condition in order to change the behavior of the system.

Affected configurations

NVD

Node

dellchengming_3900_firmwareRange<1.1.66

AND

dellchengming_3900Match-

Node

dellinspiron_14_plus_7420_firmwareRange<1.2.0

AND

dellinspiron_14_plus_7420Match-

Node

dellinspiron_16_plus_7620_firmwareRange<1.2.0

AND

dellinspiron_16_plus_7620Match-

Node

dellinspiron_3910_firmwareRange<1.1.66

AND

dellinspiron_3910Match-

Node

dellinspiron_5320_firmwareRange<1.1.0

AND

dellinspiron_5320Match-

Node

dellinspiron_5420_firmwareRange<1.4.1

AND

dellinspiron_5420Match-

Node

dellinspiron_5620_firmwareRange<1.4.1

AND

dellinspiron_5620Match-

Node

dellinspiron_7420_firmwareRange<1.3.0

AND

dellinspiron_7420Match-

Node

dellinspiron_7620_firmwareRange<1.3.0

AND

dellinspiron_7620Match-

Node

delloptiplex_3000_firmwareRange<1.1.66

AND

delloptiplex_3000Match-

Node

delloptiplex_3000_thin_client_firmwareRange<1.0.7

AND

delloptiplex_3000_thin_clientMatch-

Node

delloptiplex_5000_firmwareRange<1.3.62

AND

delloptiplex_5000Match-

Node

delloptiplex_5400_firmwareRange<1.0.13

AND

delloptiplex_5400Match-

Node

delloptiplex_7000_firmwareRange<1.3.62

AND

delloptiplex_7000Match-

Node

delloptiplex_7000_oem_firmwareRange<1.3.62

AND

delloptiplex_7000_oemMatch-

Node

delloptiplex_7400_firmwareRange<1.0.13

AND

delloptiplex_7400Match-

Node

dellprecision_3460_small_form_factor_firmwareRange<1.3.62

AND

dellprecision_3460_small_form_factorMatch-

Node

dellprecision_3660_tower_firmwareRange<1.3.71

AND

dellprecision_3660_towerMatch-

Node

dellprecision_5770_firmwareRange<1.6.0

AND

dellprecision_5770Match-

Node

dellvostro_3710_firmwareRange<1.1.66

AND

dellvostro_3710Match-

Node

dellvostro_3910_firmwareRange<1.1.66

AND

dellvostro_3910Match-

Node

dellvostro_5320_firmwareRange<1.1.0

AND

dellvostro_5320Match-

Node

dellvostro_5620_firmwareRange<1.4.1

AND

dellvostro_5620Match-

Node

dellvostro_7620_firmwareRange<1.2.0

AND

dellvostro_7620Match-

Node

dellxps_17_9720_firmwareRange<1.6.0

AND

dellxps_17_9720Match-

CPENameOperatorVersion
dell:chengming_3900_firmwaredell chengming 3900 firmwarelt1.1.66

CPE	Name	Operator	Version
dell:chengming_3900_firmware	dell chengming 3900 firmware	lt	1.1.66

CNA Affected

[
  {
    "product": "CPG BIOS",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "21Q4 platforms",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/000202196

Social References

2.4 Low

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

3.8 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.0%

JSON

Related for CVE-2022-31224

cvelist1 prion1 nvd1