Threat Investigation
Request a demo

CVE-2023-28052

Medium

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.

SeverityMedium
CVSS5.1
Exploit probability—
ProductDell Alienware Area 51m R1 Firmware
PublishedJun 23, 2023
First seenJun 23, 2023
Weakness typeCWE-20Improper input validation

How to fix

Update
  • dell alienware_area_51m_r1_firmware1.26.0 or later
  • dell alienware_area_51m_r2_firmware1.22.0 or later
  • dell alienware_aurora_r11_firmware1.0.20 or later
  • dell alienware_aurora_r12_firmware1.1.20 or later
  • dell alienware_aurora_r13_firmware1.12.0 or later
  • dell alienware_aurora_r15_firmware1.1.0 or later
  • dell alienware_m15_r2_firmware1.22.0 or later
  • dell alienware_m15_r3_firmware1.23.0 or later
  • dell alienware_m15_r4_firmware1.17.0 or later
  • dell alienware_m15_r6_firmware1.21.0 or later
  • dell alienware_m15_r7_firmware1.16.0 or later
  • dell alienware_m16_firmware1.7.0 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
dell alienware_area_51m_r1_firmwarev < 1.26.01.26.0
dell alienware_area_51m_r2_firmwarev < 1.22.01.22.0
dell alienware_aurora_r11_firmwarev < 1.0.201.0.20
dell alienware_aurora_r12_firmwarev < 1.1.201.1.20
dell alienware_aurora_r13_firmwarev < 1.12.01.12.0
dell alienware_aurora_r15_firmwarev < 1.1.01.1.0
dell alienware_m15_r2_firmwarev < 1.22.01.22.0
dell alienware_m15_r3_firmwarev < 1.23.01.23.0
dell alienware_m15_r4_firmwarev < 1.17.01.17.0
dell alienware_m15_r6_firmwarev < 1.21.01.21.0
dell alienware_m15_r7_firmwarev < 1.16.01.16.0
dell alienware_m16_firmwarev < 1.7.01.7.0
dell alienware_m17_r2_firmwarev < 1.22.01.22.0
dell alienware_m17_r3_firmwarev < 1.23.01.23.0
dell alienware_m17_r4_firmwarev < 1.17.01.17.0
dell alienware_x14_firmwarev < 1.12.01.12.0
dell alienware_x15_r1_firmwarev < 1.18.01.18.0
dell alienware_x15_r2_firmwarev < 1.13.01.13.0
dell alienware_x17_r1_firmwarev < 1.18.01.18.0
dell alienware_x17_r2_firmwarev < 1.13.01.13.0
dell chengming_3900_firmwarev < 1.11.01.11.0
dell chengming_3901_firmwarev < 1.11.01.11.0
dell chengming_3910_firmwarev < 1.1.01.1.0
dell chengming_3911_firmwarev < 1.1.01.1.0
dell chengming_3980_firmwarev < 2.29.02.29.0
dell chengming_3988_firmwarev < 1.15.01.15.0
dell chengming_3990_firmwarev < 1.19.01.19.0
dell chengming_3991_firmwarev < 1.19.01.19.0
dell g15_5510_firmwarev < 1.19.01.19.0
dell g15_5511_firmwarev < 1.21.11.21.1
dell g15_5520_firmwarev < 1.16.01.16.0
dell g15_5530_firmwarev < 1.3.01.3.0
dell g16_7620_firmwarev < 1.16.01.16.0
dell g3_15_3590_firmwarev < 1.21.01.21.0
dell g3_3500_firmwarev < 1.24.01.24.0
dell g3_3579_firmwarev < 1.25.01.25.0
dell g3_3779_firmwarev < 1.25.01.25.0
dell g5_15_5500_firmwarev < 1.24.01.24.0
dell g5_15_5590_firmwarev < 1.24.01.24.0
dell g5_5000_firmwarev < 1.13.01.13.0
dell g5_5090_firmwarev < 1.19.01.19.0
dell g7_15_7500_firmwarev < 1.23.01.23.0
dell g7_15_7590_firmwarev < 1.24.01.24.0
dell g7_17_7700_firmwarev < 1.23.01.23.0
dell g7_17_7790_firmwarev < 1.24.01.24.0
dell latitude_3480_firmwarev < 1.24.01.24.0
dell latitude_3580_firmwarev < 1.24.01.24.0
dell precision_5820_tower_firmwarev < 2.27.02.27.0
dell precision_7820_tower_firmwarev < 2.31.02.31.0
dell precision_7920_tower_firmwarev < 2.31.02.31.0
dell embedded_box_pc_5000_firmwarev < 1.19.01.19.0
dell inspiron_13_5330_firmwarev < 1.3.11.3.1
dell inspiron_14_5410_firmwarev < 2.18.02.18.0
dell inspiron_14_5418_firmwarev < 2.18.02.18.0
dell inspiron_14_5430_firmwarev < 1.2.11.2.1
dell inspiron_14_7430_2-in-1_firmwarev < 1.2.11.2.1
dell inspiron_14_plus_7420_firmwarev < 1.11.01.11.0
dell inspiron_15_3511_firmwarev < 1.21.01.21.0
dell inspiron_15_5510_firmwarev < 2.18.02.18.0
dell inspiron_15_5518_firmwarev < 2.18.02.18.0
dell inspiron_16_5630_firmwarev < 1.2.11.2.1
dell inspiron_16_7620_2-in-1_firmwarev < 1.11.01.11.0
dell inspiron_16_7630_2-in-1_firmwarev < 1.2.11.2.1
dell inspiron_16_plus_7620_firmwarev < 1.11.01.11.0
dell inspiron_24_5410_all-in-one_firmwarev < 1.11.01.11.0
dell inspiron_24_5420_all-in-one_firmwarev < 1.1.11.1.1
dell inspiron_24_5421_all-in-one_firmwarev < 1.1.11.1.1
dell inspiron_27_7720_all-in-one_firmwarev < 1.1.11.1.1
dell inspiron_3020_firmwarev < 1.1.01.1.0
dell inspiron_3020s_firmwarev < 1.1.01.1.0
dell inspiron_3280_firmwarev < 1.17.41.17.4
dell inspiron_3470_firmwarev < 2.29.02.29.0
dell inspiron_3471_firmwarev < 1.15.01.15.0
dell inspiron_3480_firmwarev < 1.23.01.23.0
dell inspiron_3481_firmwarev < 1.22.01.22.0
dell inspiron_3482_firmwarev < 1.19.01.19.0
dell inspiron_3490_firmwarev < 1.23.01.23.0
dell inspiron_3493_firmwarev < 1.26.01.26.0
dell inspiron_3501_firmwarev < 1.23.01.23.0
dell inspiron_3502_firmwarev < 1.13.01.13.0
dell inspiron_3510_firmwarev < 1.15.01.15.0
dell inspiron_3511_firmwarev < 1.21.01.21.0
dell inspiron_3520_firmwarev < 1.15.01.15.0
dell inspiron_3521_firmwarev < 1.10.01.10.0
dell inspiron_3580_firmwarev < 1.23.01.23.0
dell inspiron_3581_firmwarev < 1.22.01.22.0
dell inspiron_3582_firmwarev < 1.19.01.19.0
dell inspiron_3583_firmwarev < 1.23.01.23.0
dell inspiron_3584_firmwarev < 1.22.01.22.0
dell inspiron_3590_firmwarev < 1.23.01.23.0
dell inspiron_3593_firmwarev < 1.26.01.26.0
dell inspiron_3670_firmwarev < 2.29.02.29.0
dell inspiron_3671_firmwarev < 1.15.01.15.0
dell inspiron_3780_firmwarev < 1.23.01.23.0
dell inspiron_3781_firmwarev < 1.22.01.22.0
dell inspiron_3782_firmwarev < 1.19.01.19.0
dell inspiron_3790_firmwarev < 1.23.01.23.0
dell inspiron_3793_firmwarev < 1.26.01.26.0
dell inspiron_3880_firmwarev < 1.19.01.19.0
dell inspiron_3881_firmwarev < 1.18.01.18.0
dell inspiron_3891_firmwarev < 1.17.01.17.0
dell inspiron_3910_firmwarev < 1.11.01.11.0
dell inspiron_5300_firmwarev < 1.20.01.20.0
dell inspiron_5301_firmwarev < 1.25.01.25.0
dell inspiron_5310_firmwarev < 2.19.02.19.0
dell inspiron_5320_firmwarev < 1.10.01.10.0
dell inspiron_5391_firmwarev < 1.22.01.22.0
dell inspiron_5400_firmwarev < 1.18.01.18.0
dell inspiron_5400_2-in-1_firmwarev < 1.21.01.21.0
dell inspiron_5401_firmwarev < 1.21.01.21.0
dell inspiron_5401_aio_firmwarev < 1.18.01.18.0
dell inspiron_5402_firmwarev < 1.22.01.22.0
dell inspiron_5406_2-in-1_firmwarev < 1.22.01.22.0
dell inspiron_5408_firmwarev < 1.21.01.21.0
dell inspiron_5409_firmwarev < 1.22.01.22.0
dell inspiron_5410_firmwarev < 2.18.02.18.0
dell inspiron_5420_firmwarev < 1.13.01.13.0
dell inspiron_5481_2-in-1_firmwarev < 2.20.02.20.0
dell inspiron_5490_firmwarev < 1.23.01.23.0
dell inspiron_5490_aio_firmwarev < 1.20.01.20.0
dell inspiron_5491_2-in-1_firmwarev < 1.19.01.19.0
dell inspiron_5493_firmwarev < 1.26.01.26.0
dell inspiron_5494_firmwarev < 1.23.01.23.0
dell inspiron_5498_firmwarev < 1.23.01.23.0
dell inspiron_5501_firmwarev < 1.21.01.21.0
dell inspiron_5502_firmwarev < 1.22.01.22.0
dell inspiron_5508_firmwarev < 1.21.01.21.0
dell inspiron_5509_firmwarev < 1.22.01.22.0
dell inspiron_5570_firmwarev < 1.14.01.14.0
dell inspiron_5590_firmwarev < 1.23.01.23.0
dell inspiron_5591_2-in-1_firmwarev < 1.19.01.19.0
dell inspiron_5593_firmwarev < 1.26.01.26.0
dell inspiron_5594_firmwarev < 1.23.01.23.0
dell inspiron_5598_firmwarev < 1.23.01.23.0
dell inspiron_5620_firmwarev < 1.13.01.13.0
dell inspiron_5770_firmwarev < 1.14.01.14.0
dell inspiron_7000_firmwarev < 1.22.01.22.0
dell inspiron_7300_firmwarev < 1.25.01.25.0
dell inspiron_7300_2-in-1_firmwarev < 1.17.01.17.0
dell inspiron_7306_2-in-1_firmwarev < 1.22.01.22.0
dell inspiron_7391_firmwarev < 1.20.01.20.0
dell inspiron_7400_firmwarev < 1.25.01.25.0
dell inspiron_7420_firmwarev < 1.11.01.11.0
dell inspiron_7490_firmwarev < 1.19.01.19.0
dell inspiron_7500_firmwarev < 1.22.01.22.0
dell inspiron_7500_2-in-1_black_firmwarev < 1.17.01.17.0
dell inspiron_7500_2-in-1_silver_firmwarev < 1.21.01.21.0
dell inspiron_7501_firmwarev < 1.22.01.22.0
dell inspiron_7506_2-in-1_firmwarev < 1.22.01.22.0
dell inspiron_7510_firmwarev < 1.15.01.15.0
dell inspiron_7590_firmwarev < 1.19.01.19.0
dell inspiron_7591_firmwarev < 1.20.0, v < 1.19.01.20.0, 1.19.0
dell inspiron_7610_firmwarev < 1.15.01.15.0
dell inspiron_7700_all-in-one_firmwarev < 1.18.01.18.0
dell inspiron_7706_2-in-1_firmwarev < 1.22.01.22.0
dell inspiron_7710_firmwarev < 1.11.01.11.0
dell inspiron_7790_firmwarev < 1.20.01.20.0
dell inspiron_7791_firmwarev < 1.20.01.20.0
dell inspiron_5491_aio_firmwarev < 1.20.01.20.0
dell latitude_12_rugged_extreme_7214_firmwarev < 1.40.01.40.0
dell latitude_13_3380_firmwarev < 1.22.01.22.0
dell latitude_14_rugged_5414_firmwarev < 1.40.01.40.0
dell latitude_3120_firmwarev < 1.16.01.16.0
dell latitude_3140_firmwarev < 1.5.01.5.0
dell latitude_3180_firmwarev < 1.22.01.22.0
dell latitude_3189_firmwarev < 1.22.01.22.0
dell latitude_3190_firmwarev < 1.26.01.26.0
dell latitude_3190_2-in-1_firmwarev < 1.26.01.26.0
dell latitude_3300_firmwarev < 1.21.01.21.0
dell latitude_3301_firmwarev < 1.26.01.26.0
dell latitude_3310_firmwarev < 1.20.01.20.0
dell latitude_3310_2-in-1_firmwarev < 1.19.01.19.0
dell latitude_3320_firmwarev < 1.21.01.21.0
dell latitude_3330_firmwarev < 1.11.01.11.0
dell latitude_3390_2-in-1_firmwarev < 1.25.01.25.0
dell latitude_3400_firmwarev < 1.28.01.28.0
dell latitude_3410_firmwarev < 1.23.01.23.0
dell latitude_3420_firmwarev < 1.27.01.27.0
dell latitude_3430_firmwarev < 1.9.01.9.0
dell latitude_3490_firmwarev < 1.25.01.25.0
dell latitude_3500_firmwarev < 1.28.01.28.0
dell latitude_3510_firmwarev < 1.23.01.23.0
dell latitude_3520_firmwarev < 1.27.01.27.0
dell latitude_3530_firmwarev < 1.9.01.9.0
dell latitude_3590_firmwarev < 1.25.01.25.0
dell latitude_5280_firmwarev < 1.30.01.30.0
dell latitude_5285_2-in-1_firmwarev < 1.22.01.22.0
dell latitude_5288_firmwarev < 1.30.01.30.0
dell latitude_5289_firmwarev < 1.33.01.33.0
dell latitude_5290_firmwarev < 1.28.01.28.0
dell latitude_5290_2-in-1_firmwarev < 1.26.01.26.0
dell latitude_5300_firmwarev < 1.26.01.26.0
dell latitude_5300_2-in-1_firmwarev < 1.26.01.26.0
dell latitude_5310_firmwarev < 1.19.01.19.0
dell latitude_5310_2-in-1_firmwarev < 1.19.01.19.0
dell latitude_5320_firmwarev < 1.27.01.27.0
dell latitude_5330_firmwarev < 1.12.01.12.0
dell latitude_5400_firmwarev < 1.24.01.24.0
dell latitude_5401_firmwarev < 1.25.01.25.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.