CVE-2022-31226
12.09.2022, 19:15
Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability. A local authenticated malicious user could potentially exploit this vulnerability by sending excess data to a function in order to gain arbitrary code execution on the system.Enginsight
| Vendor | Product | Version |
|---|---|---|
| dell | chengming_3900_firmware | 𝑥 < 1.1.66 |
| dell | inspiron_14_plus_7420_firmware | 𝑥 < 1.2.0 |
| dell | inspiron_16_plus_7620_firmware | 𝑥 < 1.2.0 |
| dell | inspiron_3910_firmware | 𝑥 < 1.1.66 |
| dell | inspiron_5320_firmware | 𝑥 < 1.1.0 |
| dell | inspiron_5420_firmware | 𝑥 < 1.4.1 |
| dell | inspiron_5620_firmware | 𝑥 < 1.4.1 |
| dell | inspiron_7420_firmware | 𝑥 < 1.3.0 |
| dell | inspiron_7620_firmware | 𝑥 < 1.3.0 |
| dell | optiplex_3000_firmware | 𝑥 < 1.1.66 |
| dell | optiplex_3000_thin_client_firmware | 𝑥 < 1.0.7 |
| dell | optiplex_5000_firmware | 𝑥 < 1.3.62 |
| dell | optiplex_5400_firmware | 𝑥 < 1.0.13 |
| dell | optiplex_7000_firmware | 𝑥 < 1.3.62 |
| dell | optiplex_7000_oem_firmware | 𝑥 < 1.3.62 |
| dell | optiplex_7400_firmware | 𝑥 < 1.0.13 |
| dell | precision_3460_small_form_factor_firmware | 𝑥 < 1.3.62 |
| dell | precision_3660_tower_firmware | 𝑥 < 1.3.71 |
| dell | precision_5770_firmware | 𝑥 < 1.6.0 |
| dell | vostro_3710_firmware | 𝑥 < 1.1.66 |
| dell | vostro_3910_firmware | 𝑥 < 1.1.66 |
| dell | vostro_5320_firmware | 𝑥 < 1.1.0 |
| dell | vostro_5620_firmware | 𝑥 < 1.4.1 |
| dell | vostro_7620_firmware | 𝑥 < 1.2.0 |
| dell | xps_17_9720_firmware | 𝑥 < 1.6.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-121 - Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.