CVE-2023-28064

EPSS 0.09%
Published 23.06.2023 11:15:09
Last modified 21.11.2024 07:54:19
Source security_alert@emc.com
Teams watchlist Login
Open Login

Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Dell ≫ Alienware M15 R6 Firmware Version < 1.22.1

Dell ≫ Alienware M15 R6 Version-

Dell ≫ Alienware M15 R7 Firmware Version < 1.17.0

Dell ≫ Alienware M15 R7 Version-

Dell ≫ Chengming 3900 Firmware Version < 1.13.0

Dell ≫ Chengming 3900 Version-

Dell ≫ Chengming 3901 Firmware Version < 1.13.0

Dell ≫ Chengming 3901 Version-

Dell ≫ G15 5510 Firmware Version < 1.19.0

Dell ≫ G15 5510 Version-

Dell ≫ G15 5511 Firmware Version < 1.22.1

Dell ≫ G15 5511 Version-

Dell ≫ G15 5520 Firmware Version < 1.17.0

Dell ≫ G15 5520 Version-

Dell ≫ Inspiron 14 5418 Firmware Version < 2.19.1

Dell ≫ Inspiron 14 5418 Version-

Dell ≫ Inspiron 14 5410 Firmware Version < 2.19.1

Dell ≫ Inspiron 14 5410 Version-

Dell ≫ Inspiron 14 Plus 7420 Firmware Version < 1.13.0

Dell ≫ Inspiron 14 Plus 7420 Version-

Dell ≫ Inspiron 15 3511 Firmware Version < 1.22.1

Dell ≫ Inspiron 15 3511 Version-

Dell ≫ Inspiron 15 5510 Firmware Version < 2.19.1

Dell ≫ Inspiron 15 5510 Version-

Dell ≫ Inspiron 15 5518 Firmware Version < 2.19.1

Dell ≫ Inspiron 15 5518 Version-

Dell ≫ Inspiron 16 7620 2-in-1 Firmware Version < 1.12.1

Dell ≫ Inspiron 16 7620 2-in-1 Version-

Dell ≫ Inspiron 16 Plus 7620 Firmware Version < 1.13.0

Dell ≫ Inspiron 16 Plus 7620 Version-

Dell ≫ Inspiron 3511 Firmware Version < 1.22.1

Dell ≫ Inspiron 3511 Version-

Dell ≫ Inspiron 3520 Firmware Version < 1.15.0

Dell ≫ Inspiron 3520 Version-

Dell ≫ Inspiron 3891 Firmware Version < 1.18.1

Dell ≫ Inspiron 3891 Version-

Dell ≫ Inspiron 3910 Firmware Version < 1.13.0

Dell ≫ Inspiron 3910 Version-

Dell ≫ Inspiron 5310 Firmware Version < 2.20.1

Dell ≫ Inspiron 5310 Version-

Dell ≫ Inspiron 5320 Firmware Version < 1.11.1

Dell ≫ Inspiron 5320 Version-

Dell ≫ Inspiron 5410 Firmware Version < 2.19.1

Dell ≫ Inspiron 5410 Version-

Dell ≫ Inspiron 5420 Firmware Version < 1.14.1

Dell ≫ Inspiron 5420 Version-

Dell ≫ Inspiron 5620 Firmware Version < 1.14.1

Dell ≫ Inspiron 5620 Version-

Dell ≫ Inspiron 7420 Firmware Version < 1.12.1

Dell ≫ Inspiron 7420 Version-

Dell ≫ Inspiron 7510 Firmware Version < 1.16.1

Dell ≫ Inspiron 7510 Version-

Dell ≫ Inspiron 7610 Firmware Version < 1.16.1

Dell ≫ Inspiron 7610 Version-

Dell ≫ Latitude 3120 Firmware Version < 1.17.2

Dell ≫ Latitude 3120 Version-

Dell ≫ Latitude 3320 Firmware Version < 1.22.2

Dell ≫ Latitude 3320 Version-

Dell ≫ Latitude 3330 Firmware Version < 1.13.0

Dell ≫ Latitude 3330 Version-

Dell ≫ Latitude 3420 Firmware Version < 1.29.0

Dell ≫ Latitude 3420 Version-

Dell ≫ Latitude 3430 Firmware Version < 1.10.1

Dell ≫ Latitude 3430 Version-

Dell ≫ Latitude 3520 Firmware Version < 1.29.0

Dell ≫ Latitude 3520 Version-

Dell ≫ Latitude 3530 Firmware Version < 1.10.1

Dell ≫ Latitude 3530 Version-

Dell ≫ Latitude 5320 Firmware Version < 1.28.1

Dell ≫ Latitude 5320 Version-

Dell ≫ Latitude 5330 Firmware Version < 1.13.1

Dell ≫ Latitude 5330 Version-

Dell ≫ Latitude 5520 Firmware Version < 1.28.1

Dell ≫ Latitude 5520 Version-

Dell ≫ Latitude 5530 Firmware Version < 1.13.2

Dell ≫ Latitude 5530 Version-

Dell ≫ Latitude 5531 Firmware Version < 1.14.1

Dell ≫ Latitude 5531 Version-

Dell ≫ Latitude 7330 Firmware Version < 1.14.1

Dell ≫ Latitude 7330 Version-

Dell ≫ Latitude 7430 Firmware Version < 1.14.1

Dell ≫ Latitude 7430 Version-

Dell ≫ Latitude 7530 Firmware Version < 1.14.1

Dell ≫ Latitude 7530 Version-

Dell ≫ Latitude Rugged 5430 Firmware Version < 1.18.1

Dell ≫ Latitude Rugged 5430 Version-

Dell ≫ Latitude Rugged 7330 Firmware Version < 1.18.1

Dell ≫ Latitude Rugged 7330 Version-

Dell ≫ Optiplex 3000 Firmware Version < 1.13.1

Dell ≫ Optiplex 3000 Version-

Dell ≫ Optiplex 5000 Firmware Version < 1.13.1

Dell ≫ Optiplex 5000 Version-

Dell ≫ Optiplex 5400 Firmware Version < 1.1.28

Dell ≫ Optiplex 5400 Version-

Dell ≫ Optiplex 7000 Firmware Version < 1.13.1

Dell ≫ Optiplex 7000 Version-

Dell ≫ Optiplex 7000 Oem Firmware Version < 1.13.1

Dell ≫ Optiplex 7000 Oem Version-

Dell ≫ Optiplex 7400 Firmware Version < 1.1.28

Dell ≫ Optiplex 7400 Version-

Dell ≫ Optiplex 7410 All-in-one Firmware Version < 1.4.1

Dell ≫ Optiplex 7410 All-in-one Version-

Dell ≫ Precision 3560 Firmware Version < 1.28.1

Dell ≫ Precision 3560 Version-

Dell ≫ Precision 3570 Firmware Version < 1.13.2

Dell ≫ Precision 3570 Version-

Dell ≫ Precision 3571 Firmware Version < 1.14.1

Dell ≫ Precision 3571 Version-

Dell ≫ Precision 5760 Firmware Version < 1.20.1

Dell ≫ Precision 5760 Version-

Dell ≫ Precision 5770 Firmware Version < 1.17.1

Dell ≫ Precision 5770 Version-

Dell ≫ Vostro 3420 Firmware Version < 1.15.0

Dell ≫ Vostro 3420 Version-

Dell ≫ Vostro 3510 Firmware Version < 1.22.1

Dell ≫ Vostro 3510 Version-

Dell ≫ Vostro 3520 Firmware Version < 1.15.0

Dell ≫ Vostro 3520 Version-

Dell ≫ Vostro 3910 Firmware Version < 1.13.0

Dell ≫ Vostro 3910 Version-

Dell ≫ Vostro 5310 Firmware Version < 2.20.1

Dell ≫ Vostro 5310 Version-

Dell ≫ Vostro 5320 Firmware Version < 1.11.1

Dell ≫ Vostro 5320 Version-

Dell ≫ Vostro 5410 Firmware Version < 2.19.1

Dell ≫ Vostro 5410 Version-

Dell ≫ Vostro 5510 Firmware Version < 2.19.1

Dell ≫ Vostro 5510 Version-

Dell ≫ Vostro 5620 Firmware Version < 1.14.1

Dell ≫ Vostro 5620 Version-

Dell ≫ Vostro 7510 Firmware Version < 1.16.1

Dell ≫ Vostro 7510 Version-

Dell ≫ Vostro 7620 Firmware Version < 1.13.0

Dell ≫ Vostro 7620 Version-

Dell ≫ Xps 13 9315 2-in-1 Firmware Version < 1.8.1

Dell ≫ Xps 13 9315 2-in-1 Version-

Dell ≫ Xps 17 9710 Firmware Version < 1.20.1

Dell ≫ Xps 17 9710 Version-

Dell ≫ Xps 17 9720 Firmware Version < 1.17.1

Dell ≫ Xps 17 9720 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.09%	0.271

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.6	0.9	3.6	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
security_alert@emc.com	3.5	0.9	2.5	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.dell.com/support/kbdoc/en-us/000214778/dsa-2023-174-dell-client-bios-security-update-for-an-out-of-bounds-write-vulnerability

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-28064

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-28064

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-28064

EUVD