CVE-2022-31222

· LOWModified

← All CVEs

CVSS v3.1

2.3

EPSS

0.17%

Published

Sep 12, 2022

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by consuming excess memory in order to cause the application to crash.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Weaknesses (CWE)

CWE-401CWE-772

Affected Products (50)

dell · chengming_3900_firmware (up to 1.1.66)vulnerable

dell · chengming_3900

dell · inspiron_14_plus_7420_firmware (up to 1.2.0)vulnerable

dell · inspiron_14_plus_7420

dell · inspiron_16_plus_7620_firmware (up to 1.2.0)vulnerable

dell · inspiron_16_plus_7620

dell · inspiron_3910_firmware (up to 1.1.66)vulnerable

dell · inspiron_3910

dell · inspiron_5320_firmware (up to 1.1.0)vulnerable

dell · inspiron_5320

dell · inspiron_5420_firmware (up to 1.4.1)vulnerable

dell · inspiron_5420

dell · inspiron_5620_firmware (up to 1.4.1)vulnerable

dell · inspiron_5620

dell · inspiron_7420_firmware (up to 1.3.0)vulnerable

dell · inspiron_7420

dell · inspiron_7620_firmware (up to 1.3.0)vulnerable

dell · inspiron_7620

dell · optiplex_3000_firmware (up to 1.1.66)vulnerable

dell · optiplex_3000

dell · optiplex_3000_thin_client_firmware (up to 1.0.7)vulnerable

dell · optiplex_3000_thin_client

dell · optiplex_5000_firmware (up to 1.3.62)vulnerable

dell · optiplex_5000

dell · optiplex_5400_firmware (up to 1.0.13)vulnerable

dell · optiplex_5400

dell · optiplex_7000_firmware (up to 1.3.62)vulnerable

dell · optiplex_7000

dell · optiplex_7000_oem_firmware (up to 1.3.62)vulnerable

dell · optiplex_7000_oem

dell · optiplex_7400_firmware (up to 1.0.13)vulnerable

dell · optiplex_7400

dell · precision_3460_small_form_factor_firmware (up to 1.3.62)vulnerable

dell · precision_3460_small_form_factor

dell · precision_3660_tower_firmware (up to 1.3.71)vulnerable

dell · precision_3660_tower

dell · precision_5770_firmware (up to 1.6.0)vulnerable

dell · precision_5770

dell · vostro_3710_firmware (up to 1.1.66)vulnerable

dell · vostro_3710

dell · vostro_3910_firmware (up to 1.1.66)vulnerable

dell · vostro_3910

dell · vostro_5320_firmware (up to 1.1.0)vulnerable

dell · vostro_5320

dell · vostro_5620_firmware (up to 1.4.1)vulnerable

dell · vostro_5620

dell · vostro_7620_firmware (up to 1.2.0)vulnerable

dell · vostro_7620

dell · xps_17_9720_firmware (up to 1.6.0)vulnerable

dell · xps_17_9720

References (2)

https://www.dell.com/support/kbdoc/000202196

PatchVendor Advisory

https://www.dell.com/support/kbdoc/000202196

PatchVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs