Threat Investigation
Request a demo

CVE-2023-43078

Medium

Description

Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service.

SeverityMedium
CVSS6.7
Exploit probability—
ProductDell Dock Hd22q Firmware Update Utility
PublishedAug 28, 2024
First seenAug 28, 2024
Weakness typeCWE-59Improper link resolution

How to fix

Update
  • dell intel_thunderbolt_controller_firmware_update_utility4.62.156.006, 4.66.128.015, 4.65.111.022, 4.61.124.014, 4.46.147.004, 4.46.134.013, 4.66.131.016, 4.46.135.009, 4.65.162.003, 4.65.119.017, 4.62.140.014, 4.46.166.001, 4.65.163.002, 4.62.139.013, 4.46.112.015, 4.65.116.019, 4.46.143.009, 4.46.145.004, 4.65.117.031, 4.62.102.024, 4.69.120.013, 4.65.108.018, 4.46.106.031 or later
  • dell tpm_2.0_firmware_update_utility7.2.2.0 or later
  • dell alienware_m15_r6_firmware1.27.0 or later
  • dell alienware_m15_r7_firmware1.22.0 or later
  • dell alienware_m16_r1_firmware1.14.1 or later
  • dell alienware_m18_r1_firmware1.14.1 or later
  • dell alienware_x14_r2_firmware1.11.0 or later
  • dell alienware_x16_r1_firmware1.11.0 or later
  • dell chengming_3900_firmware1.19.0 or later
  • dell chengming_3910_firmware1.11.0 or later
  • dell chengming_3911_firmware1.11.0 or later
  • dell chengming_3988_firmware1.20.0 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
dell intel_thunderbolt_controller_firmware_update_utilityv < 4.62.156.006, v < 4.66.128.015, v < 4.65.111.022, v < 4.61.124.014, v < 4.46.147.004, v < 4.46.134.013, v < 4.66.131.016, v < 4.46.135.009, v < 4.65.162.003, v < 4.65.119.017, v < 4.62.140.014, v < 4.46.166.001, v < 4.65.163.002, v < 4.62.139.013, v < 4.46.112.015, v < 4.65.116.019, v < 4.46.143.009, v < 4.46.145.004, v < 4.65.117.031, v < 4.62.102.024, v < 4.69.120.013, v < 4.65.108.018, v < 4.46.106.0314.62.156.006, 4.66.128.015, 4.65.111.022, 4.61.124.014, 4.46.147.004, 4.46.134.013, 4.66.131.016, 4.46.135.009, 4.65.162.003, 4.65.119.017, 4.62.140.014, 4.46.166.001, 4.65.163.002, 4.62.139.013, 4.46.112.015, 4.65.116.019, 4.46.143.009, 4.46.145.004, 4.65.117.031, 4.62.102.024, 4.69.120.013, 4.65.108.018, 4.46.106.031
dell tpm_2.0_firmware_update_utilityv < 7.2.2.07.2.2.0
dell alienware_m15_r6_firmwarev < 1.27.01.27.0
dell alienware_m15_r7_firmwarev < 1.22.01.22.0
dell alienware_m16_r1_firmwarev < 1.14.11.14.1
dell alienware_m18_r1_firmwarev < 1.14.11.14.1
dell alienware_x14_r2_firmwarev < 1.11.01.11.0
dell alienware_x16_r1_firmwarev < 1.11.01.11.0
dell chengming_3900_firmwarev < 1.19.01.19.0
dell chengming_3910_firmwarev < 1.11.01.11.0
dell chengming_3911_firmwarev < 1.11.01.11.0
dell chengming_3988_firmwarev < 1.20.01.20.0
dell chengming_3990_firmwarev < 1.24.01.24.0
dell chengming_3991_firmwarev < 1.24.01.24.0
dell g15_5510_firmwarev < 1.22.01.22.0
dell g15_5511_firmwarev < 1.26.01.26.0
dell g15_5520_firmwarev < 1.22.01.22.0
dell g15_5530_firmwarev < 1.12.01.12.0
dell g16_7620_firmwarev < 1.22.01.22.0
dell g16_7630_firmwarev < 1.12.01.12.0
dell g3_3500_firmwarev < 1.28.01.28.0
dell g5_5000_firmwarev < 1.17.01.17.0
dell g5_5090_firmwarev < 1.23.01.23.0
dell g5_5500_firmwarev < 1.28.01.28.0
dell g7_7500_firmwarev < 1.30.01.30.0
dell g7_7700_firmwarev < 1.30.01.30.0
dell inspiron_13_5310_firmwarev < 2.25.02.25.0
dell inspiron_13_5320_firmwarev < 1.16.01.16.0
dell inspiron_13_5330_firmwarev < 1.12.11.12.1
dell inspiron_14_5410_firmwarev < 2.24.02.24.0
dell inspiron_14_5418_firmwarev < 2.24.02.24.0
dell inspiron_14_5420_firmwarev < 1.19.01.19.0
dell inspiron_14_5430_firmwarev < 1.11.01.11.0
dell inspiron_14_7420_2-in-1_firmwarev < 1.17.01.17.0
dell inspiron_14_7430_2-in-1_firmwarev < 1.11.01.11.0
dell inspiron_14_plus_7420_firmwarev < 1.20.01.20.0
dell inspiron_14_plus_7430_firmwarev < 1.12.01.12.0
dell inspiron_15_3511_firmwarev < 1.26.01.26.0
dell inspiron_15_3520_firmwarev < 1.22.01.22.0
dell inspiron_15_3530_firmwarev < 1.8.01.8.0
dell inspiron_15_5510_firmwarev < 2.24.02.24.0
dell inspiron_15_5518_firmwarev < 2.24.02.24.0
dell inspiron_15_7510_firmwarev < 1.20.01.20.0
dell inspiron_16_5620_firmwarev < 1.19.01.19.0
dell inspiron_16_5630_firmwarev < 1.11.01.11.0
dell inspiron_16_7610_firmwarev < 1.20.01.20.0
dell inspiron_16_7620_2-in-1_firmwarev < 1.17.01.17.0
dell inspiron_16_7630_2-in-1_firmwarev < 1.11.01.11.0
dell inspiron_16_plus_7620_firmwarev < 1.20.01.20.0
dell inspiron_16_plus_7630_firmwarev < 1.12.01.12.0
dell inspiron_24_5410_all-in-one_firmwarev < 1.18.01.18.0
dell inspiron_24_5411_all-in-one_firmwarev < 1.18.01.18.0
dell inspiron_24_5420_all-in-one_firmwarev < 1.8.01.8.0
dell inspiron_27_7710_all-in-one_firmwarev < 1.18.01.18.0
dell inspiron_27_7720_all-in-one_firmwarev < 1.8.01.8.0
dell inspiron_3020_desktop_firmwarev < 1.11.01.11.0
dell inspiron_3020_small_desktop_firmwarev < 1.11.01.11.0
dell inspiron_3471_firmwarev < 1.20.01.20.0
dell inspiron_3480_firmwarev < 1.27.01.27.0
dell inspiron_3501_firmwarev < 1.28.01.28.0
dell inspiron_3580_firmwarev < 1.27.01.27.0
dell inspiron_3593_firmwarev < 1.29.01.29.0
dell inspiron_3671_firmwarev < 1.20.01.20.0
dell inspiron_3793_firmwarev < 1.29.01.29.0
dell inspiron_3880_firmwarev < 1.24.11.24.1
dell inspiron_3881_firmwarev < 1.24.11.24.1
dell inspiron_3891_firmwarev < 1.22.11.22.1
dell inspiron_3910_firmwarev < 1.19.01.19.0
dell inspiron_5301_firmwarev < 1.31.01.31.0
dell inspiron_5400_firmwarev < 1.24.01.24.0
dell inspiron_5401_aio_firmwarev < 1.24.01.24.0
dell inspiron_5401_firmwarev < 1.24.01.24.0
dell inspiron_5402_firmwarev < 1.28.01.28.0
dell inspiron_5406_2-in-1_firmwarev < 1.28.01.28.0
dell inspiron_5409_firmwarev < 1.28.01.28.0
dell inspiron_5410_firmwarev < 2.24.02.24.0
dell inspiron_5502_firmwarev < 1.28.01.28.0
dell inspiron_5509_firmwarev < 1.28.01.28.0
dell inspiron_5593_firmwarev < 1.29.01.29.0
dell inspiron_7300_firmwarev < 1.31.01.31.0
dell inspiron_7306_2-in-1_firmwarev < 1.28.01.28.0
dell inspiron_7400_firmwarev < 1.31.01.31.0
dell inspiron_7490_firmwarev < 1.24.01.24.0
dell inspiron_7500_firmwarev < 1.26.01.26.0
dell inspiron_7501_firmwarev < 1.26.01.26.0
dell inspiron_7506_2-in-1_firmwarev < 1.28.01.28.0
dell inspiron_7700_all-in-one_firmwarev < 1.24.01.24.0
dell inspiron_7706_2-in-1_firmwarev < 1.28.01.28.0
dell latitude_3120_firmwarev < 1.22.01.22.0
dell latitude_3140_firmwarev < 1.12.01.12.0
dell latitude_3190_2-in-1_firmwarev < 1.31.01.31.0
dell latitude_3190_firmwarev < 1.31.01.31.0
dell latitude_3300_firmwarev < 1.25.01.25.0
dell latitude_3301_firmwarev < 1.29.01.29.0
dell latitude_3310_2-in-1_firmwarev < 1.22.01.22.0
dell latitude_3310_firmwarev < 1.23.01.23.0
dell latitude_3320_firmwarev < 1.27.01.27.0
dell latitude_3330_firmwarev < 1.19.01.19.0
dell latitude_3340_firmwarev < 1.10.01.10.0
dell latitude_3400_firmwarev < 1.31.01.31.0
dell latitude_3410_firmwarev < 1.27.01.27.0
dell latitude_3420_firmwarev < 1.34.01.34.0
dell latitude_3430_firmwarev < 1.16.01.16.0
dell latitude_3440_firmwarev < 1.10.01.10.0
dell latitude_3500_firmwarev < 1.31.01.31.0
dell latitude_3510_firmwarev < 1.27.01.27.0
dell latitude_3520_firmwarev < 1.34.01.34.0
dell latitude_3530_firmwarev < 1.16.01.16.0
dell latitude_3540_firmwarev < 1.10.01.10.0
dell latitude_5290_2-in-1_firmwarev < 1.31.01.31.0
dell latitude_5290_firmwarev < 1.32.01.32.0
dell latitude_5300_2-in-1_firmwarev < 1.29.01.29.0
dell latitude_5300_firmwarev < 1.29.01.29.0
dell latitude_5310_2-in-1_firmwarev < 1.22.01.22.0
dell latitude_5310_firmwarev < 1.22.01.22.0
dell latitude_5320_firmwarev < 1.36.01.36.0
dell latitude_5330_firmwarev < 1.19.01.19.0
dell latitude_5340_firmwarev < 1.10.11.10.1
dell latitude_5400_firmwarev < 1.27.01.27.0
dell latitude_5401_firmwarev < 1.28.01.28.0
dell latitude_5410_firmwarev < 1.24.01.24.0
dell latitude_5411_firmwarev < 1.25.01.25.0
dell latitude_5420_firmwarev < 1.36.21.36.2
dell latitude_5420_rugged_firmwarev < 1.29.01.29.0
dell latitude_5421_firmwarev < 1.26.01.26.0
dell latitude_5424_rugged_firmwarev < 1.29.01.29.0
dell latitude_5430_firmwarev < 1.19.01.19.0
dell latitude_5430_rugged_laptop_firmwarev < 1.23.01.23.0
dell latitude_5431_firmwarev < 1.19.01.19.0
dell latitude_5440_firmwarev < 1.11.01.11.0
dell latitude_5490_firmwarev < 1.32.01.32.0
dell latitude_5491_firmwarev < 1.30.01.30.0
dell latitude_5500_firmwarev < 1.27.01.27.0
dell latitude_5501_firmwarev < 1.28.01.28.0
dell latitude_5510_firmwarev < 1.24.01.24.0
dell latitude_5511_firmwarev < 1.25.01.25.0
dell latitude_5520_firmwarev < 1.36.01.36.0
dell latitude_5521_firmwarev < 1.27.01.27.0
dell latitude_5530_firmwarev < 1.21.11.21.1
dell latitude_5531_firmwarev < 1.20.01.20.0
dell latitude_5540_firmwarev < 1.10.11.10.1
dell latitude_5590_firmwarev < 1.32.01.32.0
dell latitude_5591_firmwarev < 1.30.01.30.0
dell latitude_7200_2-in-1_firmwarev < 1.26.01.26.0
dell latitude_7210_2-in-1_firmwarev < 1.26.01.26.0
dell latitude_7220_rugged_extreme_firmwarev < 1.33.01.33.0
dell latitude_7230_rugged_extreme_firmwarev < 1.12.01.12.0
dell latitude_7290_firmwarev < 1.35.01.35.0
dell latitude_7300_firmwarev < 1.28.01.28.0
dell latitude_7310_firmwarev < 1.26.01.26.0
dell latitude_7320_detachable_firmwarev < 1.28.01.28.0
dell latitude_7320_firmwarev < 1.34.21.34.2
dell latitude_7330_firmwarev < 1.20.01.20.0
dell latitude_7330_rugged_laptop_firmwarev < 1.23.01.23.0
dell latitude_7340_firmwarev < 1.11.01.11.0
dell latitude_7390_firmwarev < 1.35.01.35.0
dell latitude_7400_2-in-1_firmwarev < 1.25.01.25.0
dell latitude_7400_firmwarev < 1.28.01.28.0
dell latitude_7410_firmwarev < 1.26.01.26.0
dell latitude_7420_firmwarev < 1.34.21.34.2
dell latitude_7424_rugged_extreme_firmwarev < 1.29.01.29.0
dell latitude_7430_firmwarev < 1.20.01.20.0
dell latitude_7440_firmwarev < 1.11.01.11.0
dell latitude_7490_firmwarev < 1.35.01.35.0
dell latitude_7520_firmwarev < 1.34.21.34.2
dell latitude_7530_firmwarev < 1.20.01.20.0
dell latitude_7640_firmwarev < 1.11.01.11.0
dell latitude_9330_firmwarev < 1.17.01.17.0
dell latitude_9410_firmwarev < 1.25.01.25.0
dell latitude_9420_firmwarev < 1.27.01.27.0
dell latitude_9430_firmwarev < 1.20.01.20.0
dell latitude_9440_2-in-1_firmwarev < 1.8.01.8.0
dell latitude_9510_2in1_firmwarev < 1.24.01.24.0
dell latitude_9520_firmwarev < 1.30.11.30.1
dell latitude_rugged_7220ex_firmwarev < 1.33.01.33.0
dell optiplex_3000_micro_firmwarev < 1.19.01.19.0
dell optiplex_3000_small_form_factor_firmwarev < 1.19.01.19.0
dell optiplex_3000_thin_client_firmwarev < 1.15.01.15.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2023-43078 · Dell Dock Hd22q Firmware Update Utility · Dark Radar