CVE Feed

    Dashboard / CVE / CVE-2022-31223

    CVE-2022-31223

    Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by sending unexpected null bytes in order to read memory on the system.

    Published:Sep 12, 2022
    Last Modified:Nov 21, 2024
    EPS:Sep 12, 2022
    EPSS Score:0.00116
    CVSS Score:2.3

    Affected Products

    Vendor
    Dell
    Product
    Chengming 3900
    Vendor
    Dell
    Product
    Chengming 3900 Firmware
    Vendor
    Dell
    Product
    Inspiron 14 Plus 7420
    Vendor
    Dell
    Product
    Inspiron 14 Plus 7420 Firmware
    Vendor
    Dell
    Product
    Inspiron 16 Plus 7620
    Vendor
    Dell
    Product
    Inspiron 16 Plus 7620 Firmware
    Vendor
    Dell
    Product
    Inspiron 3910
    Vendor
    Dell
    Product
    Inspiron 3910 Firmware
    Vendor
    Dell
    Product
    Inspiron 5320
    Vendor
    Dell
    Product
    Inspiron 5320 Firmware
    Vendor
    Dell
    Product
    Inspiron 5420
    Vendor
    Dell
    Product
    Inspiron 5420 Firmware
    Vendor
    Dell
    Product
    Inspiron 5620
    Vendor
    Dell
    Product
    Inspiron 5620 Firmware
    Vendor
    Dell
    Product
    Inspiron 7420
    Vendor
    Dell
    Product
    Inspiron 7420 Firmware
    Vendor
    Dell
    Product
    Inspiron 7620
    Vendor
    Dell
    Product
    Inspiron 7620 Firmware
    Vendor
    Dell
    Product
    Optiplex 3000
    Vendor
    Dell
    Product
    Optiplex 3000 Firmware
    Vendor
    Dell
    Product
    Optiplex 3000 Thin Client
    Vendor
    Dell
    Product
    Optiplex 3000 Thin Client Firmware
    Vendor
    Dell
    Product
    Optiplex 5000
    Vendor
    Dell
    Product
    Optiplex 5000 Firmware
    Vendor
    Dell
    Product
    Optiplex 5400
    Vendor
    Dell
    Product
    Optiplex 5400 Firmware
    Vendor
    Dell
    Product
    Optiplex 7000
    Vendor
    Dell
    Product
    Optiplex 7000 Firmware
    Vendor
    Dell
    Product
    Optiplex 7000 Oem
    Vendor
    Dell
    Product
    Optiplex 7000 Oem Firmware
    Vendor
    Dell
    Product
    Optiplex 7400
    Vendor
    Dell
    Product
    Optiplex 7400 Firmware
    Vendor
    Dell
    Product
    Precision 3460 Small Form Factor
    Vendor
    Dell
    Product
    Precision 3460 Small Form Factor Firmware
    Vendor
    Dell
    Product
    Precision 3660 Tower
    Vendor
    Dell
    Product
    Precision 3660 Tower Firmware
    Vendor
    Dell
    Product
    Precision 5770
    Vendor
    Dell
    Product
    Precision 5770 Firmware
    Vendor
    Dell
    Product
    Vostro 3710
    Vendor
    Dell
    Product
    Vostro 3710 Firmware
    Vendor
    Dell
    Product
    Vostro 3910
    Vendor
    Dell
    Product
    Vostro 3910 Firmware
    Vendor
    Dell
    Product
    Vostro 5320
    Vendor
    Dell
    Product
    Vostro 5320 Firmware
    Vendor
    Dell
    Product
    Vostro 5620
    Vendor
    Dell
    Product
    Vostro 5620 Firmware
    Vendor
    Dell
    Product
    Vostro 7620
    Vendor
    Dell
    Product
    Vostro 7620 Firmware
    Vendor
    Dell
    Product
    Xps 17 9720
    Vendor
    Dell
    Product
    Xps 17 9720 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-52 Embedding NULL Bytes
    CAPEC-53 Postfix, Null Terminate, and Backslash

    Related CVEs

    CVE-2025-29988 (CVSS 6.9) — Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker wit…
    CVE-2024-52541 (CVSS 8.2) — Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local …
    CVE-2023-43078 (CVSS 6.7) — Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installat…
    CVE-2024-0158 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin…
    CVE-2024-22448 (CVSS 4.7) — Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privi…
    CVE-2023-28063 (CVSS 6.7) — Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user …
    CVE-2023-32453 (CVSS 4.6) — Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the sys…
    CVE-2023-28075 (CVSS 6.9) — Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user wit…
    CVE-2023-28064 (CVSS 3.5) — Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially…
    CVE-2023-28058 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High