HIGH · 7.1

CVE-2022-31226

Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability. A local authenticated malicious user could potentially exploit this vulnerability by sending excess data to a function in order ...

Vulnerability Description

Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability. A local authenticated malicious user could potentially exploit this vulnerability by sending excess data to a function in order to gain arbitrary code execution on the system.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
DellChengming 3900 Firmware< 1.1.66
DellChengming 3900-
DellInspiron 14 Plus 7420 Firmware< 1.2.0
DellInspiron 14 Plus 7420-
DellInspiron 16 Plus 7620 Firmware< 1.2.0
DellInspiron 16 Plus 7620-
DellInspiron 3910 Firmware< 1.1.66
DellInspiron 3910-
DellInspiron 5320 Firmware< 1.1.0
DellInspiron 5320-
DellInspiron 5420 Firmware< 1.4.1
DellInspiron 5420-
DellInspiron 5620 Firmware< 1.4.1
DellInspiron 5620-
DellInspiron 7420 Firmware< 1.3.0
DellInspiron 7420-
DellInspiron 7620 Firmware< 1.3.0
DellInspiron 7620-
DellOptiplex 3000 Firmware< 1.1.66
DellOptiplex 3000-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2022-31226?

CVE-2022-31226 is a vulnerability with a CVSS score of 7.1 (HIGH). Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability. A local authenticated malicious user could potentially exploit this vulnerability by sending excess data to a function in order ...

How severe is CVE-2022-31226?

CVE-2022-31226 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-31226?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Chengming 3900 Firmware, Dell Chengming 3900, Dell Inspiron 14 Plus 7420 Firmware, Dell Inspiron 14 Plus 7420, Dell Inspiron 16 Plus 7620 Firmware.