CVE-2022-31224 — Improper Protection Against Voltage and Clock Glitches in Dell CPG Bios

CWE-1247 — Improper Protection Against Voltage and Clock Glitches3 documents3 sources
Severity
2.4LOWNVD
CNA2.0
EPSS
0.1%
top 77.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
26
Dell CPG BiosDell Chengming 3900 FirmwareDell Inspiron 14 Plus 7420 Firmware+23 more
Timeline
PublishedSep 12
Latest updateSep 13

Description

Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by triggering a fault condition in order to change the behavior of the system.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 0.9 | Impact: 1.4

Affected Packages26 packages

▶CVEListV5dell/cpg_biosunspecified — 21Q4 platforms

Patches

Patch: www.dell.com ↗Patch: www.dell.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-mg58-874j-558m: Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability↗2022-09-13
▶
CVEList
CVE-2022-31224: Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability↗2022-09-12
▶
CVE-2022-31224 — Dell CPG Bios vulnerability | cvebase