CVE-2022-31221 — Sensitive Information Exposure in Dell CPG Bios

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
2.3LOWNVD
EPSS
0.0%
top 85.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
26
Dell CPG BiosDell Chengming 3900 FirmwareDell Inspiron 14 Plus 7420 Firmware+23 more
Timeline
PublishedSep 12
Latest updateSep 13

Description

Dell BIOS versions contain an Information Exposure vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order access sensitive state information on the system.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:NExploitability: 0.8 | Impact: 1.4

Affected Packages26 packages

▶CVEListV5dell/cpg_biosunspecified — 21Q4 platforms

Patches

Patch: www.dell.com ↗Patch: www.dell.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rp2c-mr44-qxg8: Dell BIOS versions contain an Information Exposure vulnerability↗2022-09-13
▶
CVEList
CVE-2022-31221: Dell BIOS versions contain an Information Exposure vulnerability↗2022-09-12
▶
CVE-2022-31221 — Sensitive Information Exposure in Dell | cvebase