CVE-2023-32475

Published: Jun 7, 2024Modified: Nov 21, 2024

7.6

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 6.0

Source: NVD

Description

Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.

Affected (40)

40 products

Vostro 16 5635 Firmware

Vostro 15 3535 Firmware

Vostro 15 3525 Firmware

Vostro 15 3515 Firmware

Vostro 14 3435 Firmware

Vostro 14 3425 Firmware

Inspiron 7415 2 In 1 Firmware

Inspiron 7405 2 In 1 Firmware

Inspiron 5515 Firmware

Inspiron 5505 Firmware

Inspiron 5415 Firmware

Inspiron 5405 Firmware

Inspiron 3505 Firmware

Inspiron 24 5415 All In One Firmware

Inspiron 16 7635 2 In 1 Firmware

Inspiron 16 5635 Firmware

Inspiron 16 5625 Firmware

Inspiron 15 3535 Firmware

Inspiron 15 3525 Firmware

Inspiron 15 3515 Firmware

Inspiron 14 7435 2 In 1 Firmware

Inspiron 14 7425 2 In 1 Firmware

Inspiron 14 5435 Firmware

Inspiron 14 5425 Firmware

Alienware M18 Firmware

Alienware M17 R5 Amd Firmware

Alienware M16 R1 Amd Firmware

Alienware M15 Ryzen Edition R5 Firmware

Alienware M15 R7 Amd Firmware

Alienware Aurora Ryzen Edition R14 Firmware

Alienware Aurora R15 Amd Firmware

Alienware Aurora R10 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 5625 Firmware	Before 1.13.0

Running on/with	Platform Versions
Dell Vostro 5625	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 5515 Firmware	Before 1.19.0

Running on/with	Platform Versions
Dell Vostro 5515	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 5415 Firmware	Before 1.19.0

Running on/with	Platform Versions
Dell Vostro 5415	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 3405 Firmware	Before 1.16.0

Running on/with	Platform Versions
Dell Vostro 3405	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 16 5635 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Vostro 16 5635	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 15 3535 Firmware	Before 1.12.0

Running on/with	Platform Versions
Dell Vostro 15 3535	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 15 3525 Firmware	Before 1.15.1

Running on/with	Platform Versions
Dell Vostro 15 3525	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 15 3515 Firmware	Before 1.16.0

Running on/with	Platform Versions
Dell Vostro 15 3515	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 14 3435 Firmware	Before 1.12.0

Running on/with	Platform Versions
Dell Vostro 14 3435	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 14 3425 Firmware	Before 1.15.1

Running on/with	Platform Versions
Dell Vostro 14 3425	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 7415 2 In 1 Firmware	Before 1.19.0

Running on/with	Platform Versions
Dell Inspiron 7415 2 In 1	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 7405 2 In 1 Firmware	Before 1.15.0

Running on/with	Platform Versions
Dell Inspiron 7405 2 In 1	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5515 Firmware	Before 1.19.0

Running on/with	Platform Versions
Dell Inspiron 5515	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5505 Firmware	Before 1.14.0

Running on/with	Platform Versions
Dell Inspiron 5505	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5415 Firmware	Before 1.19.0

Running on/with	Platform Versions
Dell Inspiron 5415	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 5405 Firmware	Before 1.14.0

Running on/with	Platform Versions
Dell Inspiron 5405	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3505 Firmware	Before 1.16.0

Running on/with	Platform Versions
Dell Inspiron 3505	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 24 5415 All In One Firmware	Before 1.17.0

Running on/with	Platform Versions
Dell Inspiron 24 5415 All In One	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 16 7635 2 In 1 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Inspiron 16 7635 2 In 1	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 16 5635 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Inspiron 16 5635	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 16 5625 Firmware	Before 1.13.0

Running on/with	Platform Versions
Dell Inspiron 16 5625	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 15 3535 Firmware	Before 1.12.0

Running on/with	Platform Versions
Dell Inspiron 15 3535	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 15 3525 Firmware	Before 1.15.1

Running on/with	Platform Versions
Dell Inspiron 15 3525	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 15 3515 Firmware	Before 1.16.0

Running on/with	Platform Versions
Dell Inspiron 15 3515	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 14 7435 2 In 1 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Inspiron 14 7435 2 In 1	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 14 7425 2 In 1 Firmware	Before 1.13.0

Running on/with	Platform Versions
Dell Inspiron 14 7425 2 In 1	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 14 5435 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Inspiron 14 5435	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 14 5425 Firmware	Before 1.13.0

Running on/with	Platform Versions
Dell Inspiron 14 5425	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell G5 5505 Firmware	Before 1.18.0

Running on/with	Platform Versions
Dell G5 5505	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell G15 5535 Firmware	Before 1.5.0

Running on/with	Platform Versions
Dell G15 5535	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell G15 5525 Firmware	Before 1.15.0

Running on/with	Platform Versions
Dell G15 5525	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell G15 5515 Firmware	Before 1.15.0

Running on/with	Platform Versions
Dell G15 5515	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware M18 Firmware	Before 1.9.0

Running on/with	Platform Versions
Dell Alienware M18	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware M17 R5 Amd Firmware	Before 1.15.0

Running on/with	Platform Versions
Dell Alienware M17 R5 Amd	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware M16 R1 Amd Firmware	Before 1.9.0

Running on/with	Platform Versions
Dell Alienware M16 R1 Amd	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware M15 Ryzen Edition R5 Firmware	Before 1.16.0

Running on/with	Platform Versions
Dell Alienware M15 Ryzen Edition R5	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware M15 R7 Amd Firmware	Before 1.15.0

Running on/with	Platform Versions
Dell Alienware M15 R7 Amd	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware Aurora Ryzen Edition R14 Firmware	Before 2.16.0

Running on/with	Platform Versions
Dell Alienware Aurora Ryzen Edition R14	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware Aurora R15 Amd Firmware	Before 1.13.0

Running on/with	Platform Versions
Dell Alienware Aurora R15 Amd	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware Aurora R10 Firmware	Before 2.6.0

Running on/with	Platform Versions
Dell Alienware Aurora R10	All versions

Related CWEs

CWE-353

Missing Support for Integrity Check

The product uses a transmission protocol that does not include a mechanism for verifying the integrity of the data during transmission, such as a checksum.

References (2)

https://www.dell.com/support/kbdoc/en-us/000215644/dsa-2023-222-security-update-for-an-amd-bios-vulnerability

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000215644/dsa-2023-222-security-update-for-an-amd-bios-vulnerability

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.