CVE-2023-32480
Medium
Description
Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability to perform arbitrary code execution.
SeverityMedium
CVSS6.8
Exploit probability—
ProductDell Alienware M15 R7 Firmware
PublishedJun 23, 2023
First seenJun 23, 2023
Weakness typeCWE-20Improper input validation
How to fix
Update
- dell alienware_m15_r7_firmware1.17.0 or later
- dell g15_5510_firmware1.19.0 or later
- dell g15_5520_firmware1.17.0 or later
- dell inspiron_14_5410_firmware2.19.1 or later
- dell inspiron_14_5418_firmware2.19.1 or later
- dell inspiron_15_5510_firmware2.19.1 or later
- dell inspiron_15_5518_firmware2.19.1 or later
- dell inspiron_16_7620_2-in-1_firmware1.12.1 or later
- dell inspiron_3520_firmware1.15.0 or later
- dell inspiron_5410_firmware2.19.1 or later
- dell inspiron_5420_firmware1.14.1 or later
- dell inspiron_5620_firmware1.14.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell alienware_m15_r7_firmware | v < 1.17.0 | 1.17.0 |
| dell g15_5510_firmware | v < 1.19.0 | 1.19.0 |
| dell g15_5520_firmware | v < 1.17.0 | 1.17.0 |
| dell inspiron_14_5410_firmware | v < 2.19.1 | 2.19.1 |
| dell inspiron_14_5418_firmware | v < 2.19.1 | 2.19.1 |
| dell inspiron_15_5510_firmware | v < 2.19.1 | 2.19.1 |
| dell inspiron_15_5518_firmware | v < 2.19.1 | 2.19.1 |
| dell inspiron_16_7620_2-in-1_firmware | v < 1.12.1 | 1.12.1 |
| dell inspiron_3520_firmware | v < 1.15.0 | 1.15.0 |
| dell inspiron_5410_firmware | v < 2.19.1 | 2.19.1 |
| dell inspiron_5420_firmware | v < 1.14.1 | 1.14.1 |
| dell inspiron_5620_firmware | v < 1.14.1 | 1.14.1 |
| dell inspiron_7420_firmware | v < 1.12.1 | 1.12.1 |
| dell inspiron_7510_firmware | v < 1.16.1 | 1.16.1 |
| dell inspiron_7610_firmware | v < 1.16.1 | 1.16.1 |
| dell latitude_3320_firmware | v < 1.22.2 | 1.22.2 |
| dell latitude_3420_firmware | v < 1.29.0 | 1.29.0 |
| dell latitude_3430_firmware | v < 1.10.1 | 1.10.1 |
| dell latitude_3520_firmware | v < 1.29.0 | 1.29.0 |
| dell latitude_3530_firmware | v < 1.10.1 | 1.10.1 |
| dell precision_5760_firmware | v < 1.20.1 | 1.20.1 |
| dell precision_5770_firmware | v < 1.17.1 | 1.17.1 |
| dell vostro_3420_firmware | v < 1.15.0 | 1.15.0 |
| dell vostro_3520_firmware | v < 1.15.0 | 1.15.0 |
| dell vostro_5410_firmware | v < 2.19.1 | 2.19.1 |
| dell vostro_5510_firmware | v < 2.19.1 | 2.19.1 |
| dell vostro_5620_firmware | v < 1.14.1 | 1.14.1 |
| dell vostro_7510_firmware | v < 1.16.1 | 1.16.1 |
| dell xps_13_9315_2-in-1_firmware | v < 1.8.1 | 1.8.1 |
| dell xps_17_9710_firmware | v < 1.20.1 | 1.20.1 |
| dell xps_17_9720_firmware | v < 1.17.1 | 1.17.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.