CVE-2022-31223CWE-158

Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability

Low · published September 12, 2022

CVSS v3.1
2.3
EPSS
0%
Percentile
7.4
In the wild
Unconfirmed
What it is

Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by sending unexpected null bytes in order to read memory on the system.

The record
Technical detail
CVSS v3.1
2.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00182 · 7.4th percentile
Weakness
CWE-158 · Improper Neutralization of Null Byte or NUL Character
Published
2022-09-12T18:35Z
EPSS history
Timeline
  • 12 SEP 18:35Z
    Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability
    cvelistv5