Lucene search

[email protected]NVD:CVE-2022-31226

HistorySep 12, 2022 - 7:15 p.m.

CVE-2022-31226

2022-09-1219:15:09

CWE-121

CWE-787

[email protected]

web.nvd.nist.gov

dell

bios

buffer overflow

vulnerability

local user

malicious

arbitrary code execution

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.5%

JSON

Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability. A local authenticated malicious user could potentially exploit this vulnerability by sending excess data to a function in order to gain arbitrary code execution on the system.

Affected configurations

NVD

Node

dellchengming_3900_firmwareRange<1.1.66

AND

dellchengming_3900Match-

Node

dellinspiron_14_plus_7420_firmwareRange<1.2.0

AND

dellinspiron_14_plus_7420Match-

Node

dellinspiron_16_plus_7620_firmwareRange<1.2.0

AND

dellinspiron_16_plus_7620Match-

Node

dellinspiron_3910_firmwareRange<1.1.66

AND

dellinspiron_3910Match-

Node

dellinspiron_5320_firmwareRange<1.1.0

AND

dellinspiron_5320Match-

Node

dellinspiron_5420_firmwareRange<1.4.1

AND

dellinspiron_5420Match-

Node

dellinspiron_5620_firmwareRange<1.4.1

AND

dellinspiron_5620Match-

Node

dellinspiron_7420_firmwareRange<1.3.0

AND

dellinspiron_7420Match-

Node

dellinspiron_7620_firmwareRange<1.3.0

AND

dellinspiron_7620Match-

Node

delloptiplex_3000_firmwareRange<1.1.66

AND

delloptiplex_3000Match-

Node

delloptiplex_3000_thin_client_firmwareRange<1.0.7

AND

delloptiplex_3000_thin_clientMatch-

Node

delloptiplex_5000_firmwareRange<1.3.62

AND

delloptiplex_5000Match-

Node

delloptiplex_5400_firmwareRange<1.0.13

AND

delloptiplex_5400Match-

Node

delloptiplex_7000_firmwareRange<1.3.62

AND

delloptiplex_7000Match-

Node

delloptiplex_7000_oem_firmwareRange<1.3.62

AND

delloptiplex_7000_oemMatch-

Node

delloptiplex_7400_firmwareRange<1.0.13

AND

delloptiplex_7400Match-

Node

dellprecision_3460_small_form_factor_firmwareRange<1.3.62

AND

dellprecision_3460_small_form_factorMatch-

Node

dellprecision_3660_tower_firmwareRange<1.3.71

AND

dellprecision_3660_towerMatch-

Node

dellprecision_5770_firmwareRange<1.6.0

AND

dellprecision_5770Match-

Node

dellvostro_3710_firmwareRange<1.1.66

AND

dellvostro_3710Match-

Node

dellvostro_3910_firmwareRange<1.1.66

AND

dellvostro_3910Match-

Node

dellvostro_5320_firmwareRange<1.1.0

AND

dellvostro_5320Match-

Node

dellvostro_5620_firmwareRange<1.4.1

AND

dellvostro_5620Match-

Node

dellvostro_7620_firmwareRange<1.2.0

AND

dellvostro_7620Match-

Node

dellxps_17_9720_firmwareRange<1.6.0

AND

dellxps_17_9720Match-

References

www.dell.com/support/kbdoc/000202196

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.5%

JSON

Related for NVD:CVE-2022-31226

prion1 cvelist1 cve1 cnvd1