Low severity · published Sep 12, 2022
CVE-2022-31224
Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability
2.4
CVSS
0.2%
EPSS
No
On KEV
Description
Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by triggering a fault condition in order to change the behavior of the system.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C3
Chengming 3900 Firmware · Dell
before 1.1.66 · source: NVD
I1
Inspiron 14 Plus 7420 Firmware · Dell
before 1.2.0 · source: NVD
I1
Inspiron 16 Plus 7620 Firmware · Dell
before 1.2.0 · source: NVD
I3
Inspiron 3910 Firmware · Dell
before 1.1.66 · source: NVD
I5
Inspiron 5320 Firmware · Dell
before 1.1.0 · source: NVD
I5
Inspiron 5420 Firmware · Dell
before 1.4.1 · source: NVD
I5
Inspiron 5620 Firmware · Dell
before 1.4.1 · source: NVD
I7
Inspiron 7420 Firmware · Dell
before 1.3.0 · source: NVD
I7
Inspiron 7620 Firmware · Dell
before 1.3.0 · source: NVD
O3
Optiplex 3000 Firmware · Dell
before 1.1.66 · source: NVD
O3
Optiplex 3000 Thin Client Firmware · Dell
before 1.0.7 · source: NVD
O5
Optiplex 5000 Firmware · Dell
before 1.3.62 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-31224
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-31224
Patch
https://www.dell.com/support/kbdoc/000202196
More from Chengming 3900 Firmware
8.2
CVE-2024-52541
Dell Client Platform BIOS contains a Weak Authentication vulnerability
7.8
CVE-2022-31226
Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability
7.3
CVE-2023-43078
Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to…
6.7
CVE-2024-0158
Dell BIOS contains an improper input validation vulnerability
6.7
CVE-2023-28060
Dell BIOS contains an improper input validation vulnerability