CVE-2022-31223: Dell Chengming 3900 Firmware

Low severity, CVSS 2.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by sending unexpected null bytes in order to read memory on the system.

Affected products

• Dell Chengming 3900 Firmware: before 1.1.66 (fixed in 1.1.66)
• Dell Inspiron 14 Plus 7420 Firmware: before 1.2.0 (fixed in 1.2.0)
• Dell Inspiron 16 Plus 7620 Firmware: before 1.2.0 (fixed in 1.2.0)
• Dell Inspiron 3910 Firmware: before 1.1.66 (fixed in 1.1.66)
• Dell Inspiron 5320 Firmware: before 1.1.0 (fixed in 1.1.0)
• Dell Inspiron 5420 Firmware: before 1.4.1 (fixed in 1.4.1)
• Dell Inspiron 5620 Firmware: before 1.4.1 (fixed in 1.4.1)
• Dell Inspiron 7420 Firmware: before 1.3.0 (fixed in 1.3.0)
• Dell Inspiron 7620 Firmware: before 1.3.0 (fixed in 1.3.0)
• Dell Optiplex 3000 Firmware: before 1.1.66 (fixed in 1.1.66)
• Dell Optiplex 3000 Thin Client Firmware: before 1.0.7 (fixed in 1.0.7)
• Dell Optiplex 5000 Firmware: before 1.3.62 (fixed in 1.3.62)
• Dell Optiplex 5400 Firmware: before 1.0.13 (fixed in 1.0.13)
• Dell Optiplex 7000 Firmware: before 1.3.62 (fixed in 1.3.62)
• Dell Optiplex 7000 Oem Firmware: before 1.3.62 (fixed in 1.3.62)
• Dell Optiplex 7400 Firmware: before 1.0.13 (fixed in 1.0.13)
• Dell Precision 3460 Small Form Factor Firmware: before 1.3.62 (fixed in 1.3.62)
• Dell Precision 3660 Tower Firmware: before 1.3.71 (fixed in 1.3.71)
• Dell Precision 5770 Firmware: before 1.6.0 (fixed in 1.6.0)
• Dell Vostro 3710 Firmware: before 1.1.66 (fixed in 1.1.66)
• Dell Vostro 3910 Firmware: before 1.1.66 (fixed in 1.1.66)
• Dell Vostro 5320 Firmware: before 1.1.0 (fixed in 1.1.0)
• Dell Vostro 5620 Firmware: before 1.4.1 (fixed in 1.4.1)
• Dell Vostro 7620 Firmware: before 1.2.0 (fixed in 1.2.0)
• Dell Xps 17 9720 Firmware: before 1.6.0 (fixed in 1.6.0)

Published 2022-09-12. Last modified 2026-06-17.