CVE-2022-31220: dell chengming_3900_firmware Insecure Automated Optimizations

Vulnerability summary

CVE-2022-31220 is a medium (CVSS 5.1) Insecure Automated Optimizations vulnerability in dell chengming_3900_firmware. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 4.4% of scored vulnerabilities.

Timeline

1. 12-09-2022
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the state of the system or cause unexpected failures.

• CWE-1038Insecure Automated OptimizationsThe product uses a mechanism that automatically optimizes code, e.g. to improve a characteristic such as performance, but the optimizations can have an unintended side effect that might violate an intended security assumption.
• CWE-252Unchecked Return ValueThe product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.