low2.3
CVE-2022-31223
Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability.
Impact
Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by sending unexpected null bytes in order to read memory on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Chengming 3900 Firmware | before 1.1.66 |
| Dell | Inspiron 14 Plus 7420 Firmware | before 1.2.0 |
| Dell | Inspiron 16 Plus 7620 Firmware | before 1.2.0 |
| Dell | Inspiron 3910 Firmware | before 1.1.66 |
| Dell | Inspiron 5320 Firmware | before 1.1.0 |
| Dell | Inspiron 5420 Firmware | before 1.4.1 |
| Dell | Inspiron 5620 Firmware | before 1.4.1 |
| Dell | Inspiron 7420 Firmware | before 1.3.0 |
| Dell | Inspiron 7620 Firmware | before 1.3.0 |
| Dell | Optiplex 3000 Firmware | before 1.1.66 |
| Dell | Optiplex 3000 Thin Client Firmware | before 1.0.7 |
| Dell | Optiplex 5000 Firmware | before 1.3.62 |