{"containers": {"cna": {"affected": [{"product": "CPG BIOS", "vendor": "Dell", "versions": [{"lessThan": "21Q4 platforms", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "datePublic": "2022-08-05T00:00:00", "descriptions": [{"lang": "en", "value": "Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by sending unexpected null bytes in order to read memory on the system."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-158", "description": "CWE-158: Improper Neutralization of Null Byte or NUL Character", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-09-12T18:35:20", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.dell.com/support/kbdoc/000202196"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@dell.com", "DATE_PUBLIC": "2022-08-05", "ID": "CVE-2022-31223", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "CPG BIOS", "version": {"version_data": [{"version_affected": "<", "version_value": "21Q4 platforms"}]}}]}, "vendor_name": "Dell"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by sending unexpected null bytes in order to read memory on the system."}]}, "impact": {"cvss": {"baseScore": 2.3, "baseSeverity": "Low", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-158: Improper Neutralization of Null Byte or NUL Character"}]}]}, "references": {"reference_data": [{"name": "https://www.dell.com/support/kbdoc/000202196", "refsource": "MISC", "url": "https://www.dell.com/support/kbdoc/000202196"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T07:11:39.903Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.dell.com/support/kbdoc/000202196"}]}]}, "cveMetadata": {"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2022-31223", "datePublished": "2022-09-12T18:35:20.164940Z", "dateReserved": "2022-05-19T00:00:00", "dateUpdated": "2024-09-16T22:36:37.761Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:chengming_3900_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4ABA1EB9-E120-4022-859D-BEA3D8D3C322", "versionEndExcluding": "1.1.66", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:chengming_3900:-:*:*:*:*:*:*:*", "matchCriteriaId": "15E2ECE6-1E6F-4E84-B3CB-067B4E065268", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:inspiron_14_plus_7420_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "111298D7-EE80-48B4-9C27-1C24483A98E2", "versionEndExcluding": "1.2.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:inspiron_14_plus_7420:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE239B9D-0D57-4DF7-B63D-7B6D60038609", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:inspiron_16_plus_7620_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F6F88F1A-AC8F-4178-B00E-29934DC31315", "versionEndExcluding": "1.2.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:inspiron_16_plus_7620:-:*:*:*:*:*:*:*", "matchCriteriaId": "7830B4B7-1153-4DFB-935E-DF4B5A562E74", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:inspiron_3910_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7B87F4A3-C187-4840-86AD-6B7C9CD8C61E", "versionEndExcluding": "1.1.66", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:inspiron_3910:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A45EDB0-1897-4C15-807F-CE9AE0B0ACD0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:inspiron_5320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1D9520A2-CF13-4FB9-B971-ACD9CADF644E", "versionEndExcluding": "1.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:inspiron_5320:-:*:*:*:*:*:*:*", "matchCriteriaId": "E9D1E517-D85A-42BA-A224-DE5E0C7B2912", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:inspiron_5420_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FD4FF789-86F1-46DC-A1AC-87053BDBD7E5", "versionEndExcluding": "1.4.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:inspiron_5420:-:*:*:*:*:*:*:*", "matchCriteriaId": "C769A612-8800-4A42-B28F-21C9C47041B0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:inspiron_5620_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C672F4A8-2ABF-4092-9773-3BDC402BE23F", "versionEndExcluding": "1.4.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:inspiron_5620:-:*:*:*:*:*:*:*", "matchCriteriaId": "C5273F5B-9A70-4E33-A7E1-94F89BC65531", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:inspiron_7420_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9B6DA5C9-AFC7-48F3-A9FE-6333CBCC5A4A", "versionEndExcluding": "1.3.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:inspiron_7420:-:*:*:*:*:*:*:*", "matchCriteriaId": "7C1ACD6F-C805-4FF7-9766-0319C273455F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:inspiron_7620_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "42665B76-BAE3-40C5-B4E3-879CCC1D246D", "versionEndExcluding": "1.3.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:inspiron_7620:-:*:*:*:*:*:*:*", "matchCriteriaId": "0452378A-736C-4BD0-A581-88FC5E1EF08F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:optiplex_3000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A8C073B6-CB0D-4C55-8663-FFF9B651E463", "versionEndExcluding": "1.1.66", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:optiplex_3000:-:*:*:*:*:*:*:*", "matchCriteriaId": "CF4DFD8E-6091-46BE-AFB1-3AAADC4480CF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:optiplex_3000_thin_client_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DB0FD980-4776-4475-9394-F68FE61723AF", "versionEndExcluding": "1.0.7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:optiplex_3000_thin_client:-:*:*:*:*:*:*:*", "matchCriteriaId": "1C4B0B6B-7740-46D0-9FE0-3AFF8D9B4DDA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:optiplex_5000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7C030747-BAC5-4E6B-B44C-A2A2F71805FC", "versionEndExcluding": "1.3.62", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:optiplex_5000:-:*:*:*:*:*:*:*", "matchCriteriaId": "77A30EA6-C9E4-40AD-AE92-0AB3891BC001", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:optiplex_5400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "86ED87FB-3696-4185-AAE8-759549C2793D", "versionEndExcluding": "1.0.13", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:optiplex_5400:-:*:*:*:*:*:*:*", "matchCriteriaId": "F53D91BF-DA1C-4BFB-9E17-AB5266DB255F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:optiplex_7000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9E2C7116-C25E-4D1D-B1FC-798A46014438", "versionEndExcluding": "1.3.62", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:optiplex_7000:-:*:*:*:*:*:*:*", "matchCriteriaId": "B3B517F7-D2D1-44DD-B917-1CE71F30C13B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:optiplex_7000_oem_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1A649171-2633-4FF4-8C6D-B19CBD6779AC", "versionEndExcluding": "1.3.62", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:optiplex_7000_oem:-:*:*:*:*:*:*:*", "matchCriteriaId": "B33F8E75-DAB2-4303-8A0B-305077B492F2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:optiplex_7400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "17EBD3A6-3C58-43EA-90C6-0CA249C25D49", "versionEndExcluding": "1.0.13", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:optiplex_7400:-:*:*:*:*:*:*:*", "matchCriteriaId": "96921992-08BC-4D00-A248-191FC7CD09DD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:precision_3460_small_form_factor_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C2256294-49CD-42ED-A877-DFA5C16390A7", "versionEndExcluding": "1.3.62", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:precision_3460_small_form_factor:-:*:*:*:*:*:*:*", "matchCriteriaId": "8BF5222C-6E3A-40FA-9DA7-7415AEC46930", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:precision_3660_tower_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8F680F8A-D48C-4B2F-AB77-808A95AB9721", "versionEndExcluding": "1.3.71", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:precision_3660_tower:-:*:*:*:*:*:*:*", "matchCriteriaId": "478B6D3B-CBB5-4CAD-971E-D613375E928D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:precision_5770_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C740009F-BE38-4BEC-9EC3-169CB724914F", "versionEndExcluding": "1.6.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:precision_5770:-:*:*:*:*:*:*:*", "matchCriteriaId": "6FB330E8-BD8A-49B7-80DB-69C0FF8B0FEF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:vostro_3710_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "53D9EF5C-5EDD-4239-90C6-A3E1649E64CF", "versionEndExcluding": "1.1.66", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:vostro_3710:-:*:*:*:*:*:*:*", "matchCriteriaId": "C5DB3716-CB23-472A-B125-133B6D20AEB5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:vostro_3910_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F6FCBF9E-D794-44A8-A8A0-DF771DA3CFE4", "versionEndExcluding": "1.1.66", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:vostro_3910:-:*:*:*:*:*:*:*", "matchCriteriaId": "3897CDF5-2199-4721-95A9-105CBB2E50E1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:vostro_5320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B10FB6B0-7B68-4FA6-AAED-555C4B73A767", "versionEndExcluding": "1.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:vostro_5320:-:*:*:*:*:*:*:*", "matchCriteriaId": "03C7C578-C580-4D87-B097-078BDBC6C146", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:vostro_5620_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "51AC9491-0504-476F-8B05-AFCCEBC39196", "versionEndExcluding": "1.4.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:vostro_5620:-:*:*:*:*:*:*:*", "matchCriteriaId": "8876DEA0-1BC6-43FA-9124-F0E307961E03", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:vostro_7620_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2AA68A47-E67F-46F4-A11F-EFAD57854A3C", "versionEndExcluding": "1.2.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:vostro_7620:-:*:*:*:*:*:*:*", "matchCriteriaId": "01EAC888-0C54-41B8-8FB5-5E3DAE0F9FE9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:xps_17_9720_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "71524B51-16E5-475C-AF85-11F992846E52", "versionEndExcluding": "1.6.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:xps_17_9720:-:*:*:*:*:*:*:*", "matchCriteriaId": "CFDED31E-C2D7-4075-B046-7AB2062247A6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by sending unexpected null bytes in order to read memory on the system."}, {"lang": "es", "value": "Las versiones de Dell BIOS contienen una vulnerabilidad de Neutralizaci\u00f3n Inapropiada de Bytes Nulos. Un usuario administrador local autenticado podr\u00eda explotar esta vulnerabilidad mediante el env\u00edo de bytes nulos no esperados para leer la memoria del sistema"}], "id": "CVE-2022-31223", "lastModified": "2022-09-15T19:38:07.330", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 1.4, "source": "security_alert@emc.com", "type": "Secondary"}]}, "published": "2022-09-12T19:15:09.177", "references": [{"source": "security_alert@emc.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.dell.com/support/kbdoc/000202196"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-158"}], "source": "security_alert@emc.com", "type": "Secondary"}]}

{}