CVE-2022-31221

LOW

Dell BIOS < 1.1.66 - Authenticated Sensitive Information Exposure

Title source: llm

Description

Dell BIOS versions contain an Information Exposure vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order access sensitive state information on the system.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://www.dell.com/support/kbdoc/000202196

Scores

CVSS v3 2.3

EPSS 0.0005

EPSS Percentile 14.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (25)

dell/chengming_3900_firmware < 1.1.66

dell/inspiron_14_plus_7420_firmware < 1.2.0

dell/inspiron_16_plus_7620_firmware < 1.2.0

dell/inspiron_3910_firmware < 1.1.66

dell/inspiron_5320_firmware < 1.1.0

dell/inspiron_5420_firmware < 1.4.1

dell/inspiron_5620_firmware < 1.4.1

dell/inspiron_7420_firmware < 1.3.0

dell/inspiron_7620_firmware < 1.3.0

dell/optiplex_3000_firmware < 1.1.66

... and 15 more

Published Sep 12, 2022

Tracked Since Feb 18, 2026