Threat Investigation
Request a demo

CVE-2023-28075

Medium

Description

Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.

SeverityMedium
CVSS6.9
Exploit probability—
ProductDell Alienware M15 R7 Firmware
PublishedAug 16, 2023
First seenAug 16, 2023
Weakness typeCWE-367CWE-367

How to fix

Update
  • dell alienware_m15_r7_firmware1.18.0 or later
  • dell alienware_m16_firmware1.10.1 or later
  • dell alienware_m18_firmware1.10.1 or later
  • dell chengming_3900_firmware1.15.0 or later
  • dell chengming_3901_firmware1.15.0 or later
  • dell chengming_3910_firmware1.6.0 or later
  • dell chengming_3911_firmware1.6.0 or later
  • dell chengming_3980_firmware2.32.0 or later
  • dell chengming_3990_firmware1.21.0 or later
  • dell chengming_3991_firmware1.21.0 or later
  • dell g15_5520_firmware1.18.0 or later
  • dell g16_7620_firmware1.18.0 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
dell alienware_m15_r7_firmwarev < 1.18.01.18.0
dell alienware_m16_firmwarev < 1.10.11.10.1
dell alienware_m18_firmwarev < 1.10.11.10.1
dell chengming_3900_firmwarev < 1.15.01.15.0
dell chengming_3901_firmwarev < 1.15.01.15.0
dell chengming_3910_firmwarev < 1.6.01.6.0
dell chengming_3911_firmwarev < 1.6.01.6.0
dell chengming_3980_firmwarev < 2.32.02.32.0
dell chengming_3990_firmwarev < 1.21.01.21.0
dell chengming_3991_firmwarev < 1.21.01.21.0
dell g15_5520_firmwarev < 1.18.01.18.0
dell g16_7620_firmwarev < 1.18.01.18.0
dell g3_3500_firmwarev < 1.26.01.26.0
dell g5_15_5500_firmwarev < 1.26.01.26.0
dell g5_15_5590_firmwarev < 1.26.01.26.0
dell g7_15_7500_firmwarev < 1.26.01.26.0
dell g7_15_7590_firmwarev < 1.26.01.26.0
dell g7_17_7700_firmwarev < 1.26.01.26.0
dell g7_17_7790_firmwarev < 1.26.01.26.0
dell precision_5680_firmwarev < 1.4.11.4.1
dell precision_5820_tower_firmwarev < 2.31.02.31.0
dell precision_7820_tower_firmwarev < 2.35.02.35.0
dell precision_7920_tower_firmwarev < 2.35.02.35.0
dell edge_gateway_3000_firmwarev < 1.13.01.13.0
dell edge_gateway_5000_firmwarev < 1.23.01.23.0
dell embedded_box_pc_3000_firmwarev < 1.19.01.19.0
dell embedded_box_pc_5000_firmwarev < 1.20.01.20.0
dell inspiron_14_5410_firmwarev < 2.20.02.20.0
dell inspiron_14_5418_firmwarev < 2.20.02.20.0
dell inspiron_15_3511_firmwarev < 1.23.01.23.0
dell inspiron_15_5510_firmwarev < 2.20.02.20.0
dell inspiron_15_5518_firmwarev < 2.20.02.20.0
dell inspiron_24_5420_all-in-one_firmwarev < 1.4.01.4.0
dell inspiron_24_5421_all-in-one_firmwarev < 1.4.01.4.0
dell inspiron_27_7720_all-in-one_firmwarev < 1.4.01.4.0
dell inspiron_3020_small_desktop_firmwarev < 1.6.01.6.0
dell inspiron_3020_desktop_firmwarev < 1.6.01.6.0
dell inspiron_3470_firmwarev < 2.32.02.32.0
dell inspiron_3480_firmwarev < 1.25.01.25.0
dell inspiron_3481_firmwarev < 1.23.01.23.0
dell inspiron_3493_firmwarev < 1.27.01.27.0
dell inspiron_3511_firmwarev < 1.23.01.23.0
dell inspiron_3580_firmwarev < 1.25.01.25.0
dell inspiron_3581_firmwarev < 1.23.01.23.0
dell inspiron_3583_firmwarev < 1.25.01.25.0
dell inspiron_3584_firmwarev < 1.23.01.23.0
dell inspiron_3593_firmwarev < 1.27.01.27.0
dell inspiron_3670_firmwarev < 2.32.02.32.0
dell inspiron_3780_firmwarev < 1.25.01.25.0
dell inspiron_3781_firmwarev < 1.23.01.23.0
dell inspiron_3793_firmwarev < 1.27.01.27.0
dell inspiron_3880_firmwarev < 1.21.01.21.0
dell inspiron_3881_firmwarev < 1.21.01.21.0
dell inspiron_3891_firmwarev < 1.19.01.19.0
dell inspiron_3910_firmwarev < 1.15.01.15.0
dell inspiron_5400_firmwarev < 1.21.01.21.0
dell inspiron_5401_aio_firmwarev < 1.21.01.21.0
dell inspiron_5410_firmwarev < 2.20.02.20.0
dell inspiron_5490_aio_firmwarev < 1.22.01.22.0
dell inspiron_5493_firmwarev < 1.27.01.27.0
dell inspiron_5593_firmwarev < 1.27.01.27.0
dell inspiron_7300_2-in-1_firmwarev < 1.19.01.19.0
dell inspiron_7490_firmwarev < 1.22.01.22.0
dell inspiron_7500_firmwarev < 1.24.01.24.0
dell inspiron_7500_2-in-1_black_firmwarev < 1.19.01.19.0
dell inspiron_7501_firmwarev < 1.24.01.24.0
dell inspiron_7510_firmwarev < 1.17.01.17.0
dell inspiron_7590_firmwarev < 1.21.01.21.0
dell inspiron_7591_firmwarev < 1.21.01.21.0
dell inspiron_7610_firmwarev < 1.17.01.17.0
dell inspiron_7700_all-in-one_firmwarev < 1.21.01.21.0
dell inspiron_7790_firmwarev < 1.22.01.22.0
dell inspiron_5491_aio_firmwarev < 1.22.01.22.0
dell latitude_3120_firmwarev < 1.19.01.19.0
dell latitude_3140_firmwarev < 1.8.01.8.0
dell latitude_3180_firmwarev < 1.23.01.23.0
dell latitude_3189_firmwarev < 1.23.01.23.0
dell latitude_3190_firmwarev < 1.28.01.28.0
dell latitude_3190_2-in-1_firmwarev < 1.28.01.28.0
dell latitude_3301_firmwarev < 1.27.01.27.0
dell latitude_3310_firmwarev < 1.21.01.21.0
dell latitude_3310_2-in-1_firmwarev < 1.20.01.20.0
dell latitude_3320_firmwarev < 1.23.01.23.0
dell latitude_3330_firmwarev < 1.15.01.15.0
dell latitude_3340_firmwarev < 1.6.01.6.0
dell latitude_3400_firmwarev < 1.29.01.29.0
dell latitude_3430_firmwarev < 1.12.01.12.0
dell latitude_3440_firmwarev < 1.6.01.6.0
dell latitude_3500_firmwarev < 1.29.01.29.0
dell latitude_3530_firmwarev < 1.12.01.12.0
dell latitude_3540_firmwarev < 1.6.01.6.0
dell latitude_5280_firmwarev < 1.31.01.31.0
dell latitude_5285_2-in-1_firmwarev < 1.23.01.23.0
dell latitude_5288_firmwarev < 1.31.01.31.0
dell latitude_5290_2-in-1_firmwarev < 1.28.01.28.0
dell latitude_5300_firmwarev < 1.27.01.27.0
dell latitude_5300_2-in-1_firmwarev < 1.27.01.27.0
dell latitude_5310_firmwarev < 1.20.01.20.0
dell latitude_5310_2-in-1_firmwarev < 1.20.01.20.0
dell latitude_5400_firmwarev < 1.25.01.25.0
dell latitude_5411_firmwarev < 1.23.01.23.0
dell latitude_5420_firmwarev < 1.30.01.30.0
dell latitude_5420_rugged_firmwarev < 1.26.11.26.1
dell latitude_5424_rugged_firmwarev < 1.26.11.26.1
dell latitude_5430_firmwarev < 1.15.01.15.0
dell latitude_5431_firmwarev < 1.15.01.15.0
dell latitude_5480_firmwarev < 1.31.01.31.0
dell latitude_5488_firmwarev < 1.31.01.31.0
dell latitude_5500_firmwarev < 1.25.01.25.0
dell latitude_5511_firmwarev < 1.23.01.23.0
dell latitude_5580_firmwarev < 1.31.01.31.0
dell latitude_7200_2-in-1_firmwarev < 1.23.01.23.0
dell latitude_7210_2-in-1_firmwarev < 1.23.01.23.0
dell latitude_7230_rugged_extreme_tablet_firmwarev < 1.8.01.8.0
dell latitude_7280_firmwarev < 1.32.11.32.1
dell latitude_7285_2-in-1_firmwarev < 1.21.01.21.0
dell latitude_7290_firmwarev < 1.33.01.33.0
dell latitude_7300_firmwarev < 1.26.01.26.0
dell latitude_7310_firmwarev < 1.24.01.24.0
dell latitude_7320_firmwarev < 1.28.01.28.0
dell latitude_7380_firmwarev < 1.32.11.32.1
dell latitude_7390_firmwarev < 1.33.01.33.0
dell latitude_7390_2-in-1_firmwarev < 1.31.01.31.0
dell latitude_7400_firmwarev < 1.26.01.26.0
dell latitude_7400_2-in-1_firmwarev < 1.22.01.22.0
dell latitude_7410_firmwarev < 1.24.01.24.0
dell latitude_7420_firmwarev < 1.28.01.28.0
dell latitude_7424_rugged_extreme_firmwarev < 1.26.11.26.1
dell latitude_7480_firmwarev < 1.32.11.32.1
dell latitude_7490_firmwarev < 1.33.01.33.0
dell latitude_7520_firmwarev < 1.28.01.28.0
dell latitude_9330_firmwarev < 1.13.01.13.0
dell latitude_9410_firmwarev < 1.23.01.23.0
dell latitude_9510_firmwarev < 1.21.01.21.0
dell latitude_9520_firmwarev < 1.24.01.24.0
dell latitude_rugged_5430_firmwarev < 1.20.01.20.0
dell latitude_rugged_7220_firmwarev < 1.30.01.30.0
dell latitude_rugged_7220ex_firmwarev < 1.30.01.30.0
dell latitude_rugged_7330_firmwarev < 1.20.01.20.0
dell optiplex_3000_firmwarev < 1.15.01.15.0
dell optiplex_3000_thin_client_firmwarev < 1.11.01.11.0
dell optiplex_3050_all-in-one_firmwarev < 1.27.01.27.0
dell optiplex_3090_firmwarev < 2.14.02.14.0
dell optiplex_3280_all-in-one_firmwarev < 1.23.01.23.0
dell optiplex_5000_firmwarev < 1.15.01.15.0
dell optiplex_5090_firmwarev < 1.19.01.19.0
dell optiplex_5250_firmwarev < 1.27.01.27.0
dell optiplex_5260_all-in-one_firmwarev < 1.28.01.28.0
dell optiplex_5270_all-in-one_firmwarev < 1.24.01.24.0
dell optiplex_5400_all-in-one_firmwarev < 1.1.301.1.30
dell optiplex_5480_all-in-one_firmwarev < 1.24.01.24.0
dell optiplex_5490_all-in-one_firmwarev < 1.23.01.23.0
dell optiplex_7000_firmwarev < 1.15.01.15.0
dell optiplex_7060_firmwarev < 1.26.01.26.0
dell optiplex_7070_firmwarev < 1.22.01.22.0
dell optiplex_7070_ultra_firmwarev < 1.20.01.20.0
dell optiplex_7080_firmwarev < 1.21.01.21.0
dell optiplex_7090_firmwarev < 1.19.01.19.0
dell optiplex_7400_all-in-one_firmwarev < 1.1.301.1.30
dell optiplex_7450_firmwarev < 1.27.01.27.0
dell optiplex_7460_all-in-one_firmwarev < 1.28.01.28.0
dell optiplex_7470_all-in-one_firmwarev < 1.24.01.24.0
dell optiplex_7480_all-in-one_firmwarev < 1.24.01.24.0
dell optiplex_7490_all-in-one_firmwarev < 1.23.01.23.0
dell optiplex_7760_all-in-one_firmwarev < 1.28.01.28.0
dell optiplex_7770_all-in-one_firmwarev < 1.24.01.24.0
dell optiplex_7780_all-in-one_firmwarev < 1.24.01.24.0
dell optiplex_7410_all-in-one_firmwarev < 1.6.01.6.0
dell optiplex_micro_plus_7010_firmwarev < 1.6.01.6.0
dell optiplex_small_form_factor_plus_7010_firmwarev < 1.6.01.6.0
dell optiplex_tower_plus_7010_firmwarev < 1.6.01.6.0
dell optiplex_xe4_firmwarev < 1.15.01.15.0
dell precision_3240_compact_firmwarev < 1.20.01.20.0
dell precision_3260_xe_compact_firmwarev < 2.7.02.7.0
dell precision_3260_compact_firmwarev < 2.7.02.7.0
dell precision_3450_firmwarev < 1.19.01.19.0
dell precision_3460_xe_small_form_factor_firmwarev < 2.7.02.7.0
dell precision_3460_small_form_factor_firmwarev < 2.7.02.7.0
dell precision_3470_firmwarev < 1.15.01.15.0
dell precision_3520_firmwarev < 1.31.01.31.0
dell precision_3540_firmwarev < 1.25.01.25.0
dell precision_3551_firmwarev < 1.23.01.23.0
dell precision_3630_tower_firmwarev < 2.23.02.23.0
dell precision_3640_tower_firmwarev < 1.24.01.24.0
dell precision_3650_tower_firmwarev < 1.24.01.24.0
dell precision_3660_firmwarev < 2.7.02.7.0
dell precision_3930_rack_firmwarev < 2.26.02.26.0
dell precision_5470_firmwarev < 1.15.01.15.0
dell precision_5520_firmwarev < 1.33.01.33.0
dell precision_5530_firmwarev < 1.32.01.32.0
dell precision_5530_2-in-1_firmwarev < 1.26.81.26.8
dell precision_5540_firmwarev < 1.23.01.23.0
dell precision_5570_firmwarev < 1.16.01.16.0
dell precision_5720_aio_firmwarev < 2.20.02.20.0
dell precision_5860_tower_firmwarev < 1.0.101.0.10
dell precision_7520_firmwarev < 1.31.01.31.0
dell precision_7540_firmwarev < 1.27.01.27.0
dell precision_7550_firmwarev < 1.24.01.24.0
dell precision_7720_firmwarev < 1.31.01.31.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2023-28075 · Dell Alienware M15 R7 Firmware · Dark Radar