CVE-2023-32480

Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability to perform arbitrary code execution.

Score

CVSS 3.1 6.8 Medium

Status

Modified - security_alert@emc.com

Published

2023-06-23

Last modified

2024-11-29

Weaknesses

CWE-20

Affected products

• Alienware M15 R7 Firmware (Dell)
• Cpg Bios (Dell)
• G15 5510 Firmware (Dell)
• G15 5520 Firmware (Dell)
• Inspiron 14 5410 Firmware (Dell)
• Inspiron 14 5418 Firmware (Dell)
• Inspiron 15 5510 Firmware (Dell)
• Inspiron 15 5518 Firmware (Dell)
• Inspiron 16 7620 2-in-1 Firmware (Dell)
• Inspiron 3520 Firmware (Dell)
• Inspiron 5410 Firmware (Dell)
• Inspiron 5420 Firmware (Dell)
• Inspiron 5620 Firmware (Dell)
• Inspiron 7420 Firmware (Dell)
• Inspiron 7510 Firmware (Dell)
• Inspiron 7610 Firmware (Dell)
• Latitude 3320 Firmware (Dell)
• Latitude 3420 Firmware (Dell)
• Latitude 3430 Firmware (Dell)
• Latitude 3520 Firmware (Dell)
• Latitude 3530 Firmware (Dell)
• Precision 5760 Firmware (Dell)
• Precision 5770 Firmware (Dell)
• Vostro 3420 Firmware (Dell)
• Vostro 3520 Firmware (Dell)
• Vostro 5410 Firmware (Dell)
• Vostro 5510 Firmware (Dell)
• Vostro 5620 Firmware (Dell)
• Vostro 7510 Firmware (Dell)
• Xps 13 9315 2-in-1 Firmware (Dell)
• Xps 17 9710 Firmware (Dell)
• Xps 17 9720 Firmware (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000214779/dsa-2023-175-dell-client-bios-security-update-for-an-improper-input-…