CVE-2022-31221

Severity: low (CVSS 2.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-09-12 · updated 2026-06-17
Weakness: CWE-200

Description

Dell BIOS versions contain an Information Exposure vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order access sensitive state information on the system.

Affected products

Dell Chengming 3900 Firmware: before 1.1.66 — fixed in 1.1.66
Dell Inspiron 14 Plus 7420 Firmware: before 1.2.0 — fixed in 1.2.0
Dell Inspiron 16 Plus 7620 Firmware: before 1.2.0 — fixed in 1.2.0
Dell Inspiron 3910 Firmware: before 1.1.66 — fixed in 1.1.66
Dell Inspiron 5320 Firmware: before 1.1.0 — fixed in 1.1.0
Dell Inspiron 5420 Firmware: before 1.4.1 — fixed in 1.4.1
Dell Inspiron 5620 Firmware: before 1.4.1 — fixed in 1.4.1
Dell Inspiron 7420 Firmware: before 1.3.0 — fixed in 1.3.0
Dell Inspiron 7620 Firmware: before 1.3.0 — fixed in 1.3.0
Dell Optiplex 3000 Firmware: before 1.1.66 — fixed in 1.1.66
Dell Optiplex 3000 Thin Client Firmware: before 1.0.7 — fixed in 1.0.7
Dell Optiplex 5000 Firmware: before 1.3.62 — fixed in 1.3.62
Dell Optiplex 5400 Firmware: before 1.0.13 — fixed in 1.0.13
Dell Optiplex 7000 Firmware: before 1.3.62 — fixed in 1.3.62
Dell Optiplex 7000 Oem Firmware: before 1.3.62 — fixed in 1.3.62
Dell Optiplex 7400 Firmware: before 1.0.13 — fixed in 1.0.13
Dell Precision 3460 Small Form Factor Firmware: before 1.3.62 — fixed in 1.3.62
Dell Precision 3660 Tower Firmware: before 1.3.71 — fixed in 1.3.71
Dell Precision 5770 Firmware: before 1.6.0 — fixed in 1.6.0
Dell Vostro 3710 Firmware: before 1.1.66 — fixed in 1.1.66
Dell Vostro 3910 Firmware: before 1.1.66 — fixed in 1.1.66
Dell Vostro 5320 Firmware: before 1.1.0 — fixed in 1.1.0
Dell Vostro 5620 Firmware: before 1.4.1 — fixed in 1.4.1
Dell Vostro 7620 Firmware: before 1.2.0 — fixed in 1.2.0
Dell Xps 17 9720 Firmware: before 1.6.0 — fixed in 1.6.0

How to fix

Upgrade to a fixed version: Dell Chengming 3900 Firmware 1.1.66; Dell Inspiron 14 Plus 7420 Firmware 1.2.0; Dell Inspiron 16 Plus 7620 Firmware 1.2.0; Dell Inspiron 3910 Firmware 1.1.66; Dell Inspiron 5320 Firmware 1.1.0; Dell Inspiron 5420 Firmware 1.4.1; Dell Inspiron 5620 Firmware 1.4.1; Dell Inspiron 7420 Firmware 1.3.0; Dell Inspiron 7620 Firmware 1.3.0; Dell Optiplex 3000 Firmware 1.1.66; Dell Optiplex 3000 Thin Client Firmware 1.0.7; Dell Optiplex 5000 Firmware 1.3.62. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-31221 or the next vulnerability affects your stack