4.6

CVE-2023-28064

Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Alienware M15 R6 Firmware Version < 1.22.1
   Dell ≫ Alienware M15 R6 Version -
Dell ≫ Alienware M15 R7 Firmware Version < 1.17.0
   Dell ≫ Alienware M15 R7 Version -
Dell ≫ Chengming 3900 Firmware Version < 1.13.0
   Dell ≫ Chengming 3900 Version -
Dell ≫ Chengming 3901 Firmware Version < 1.13.0
   Dell ≫ Chengming 3901 Version -
Dell ≫ G15 5510 Firmware Version < 1.19.0
   Dell ≫ G15 5510 Version -
Dell ≫ G15 5511 Firmware Version < 1.22.1
   Dell ≫ G15 5511 Version -
Dell ≫ G15 5520 Firmware Version < 1.17.0
   Dell ≫ G15 5520 Version -
Dell ≫ Inspiron 14 5418 Firmware Version < 2.19.1
   Dell ≫ Inspiron 14 5418 Version -
Dell ≫ Inspiron 14 5410 Firmware Version < 2.19.1
   Dell ≫ Inspiron 14 5410 Version -
Dell ≫ Inspiron 14 Plus 7420 Firmware Version < 1.13.0
   Dell ≫ Inspiron 14 Plus 7420 Version -
Dell ≫ Inspiron 15 3511 Firmware Version < 1.22.1
   Dell ≫ Inspiron 15 3511 Version -
Dell ≫ Inspiron 15 5510 Firmware Version < 2.19.1
   Dell ≫ Inspiron 15 5510 Version -
Dell ≫ Inspiron 15 5518 Firmware Version < 2.19.1
   Dell ≫ Inspiron 15 5518 Version -
Dell ≫ Inspiron 16 7620 2-in-1 Firmware Version < 1.12.1
   Dell ≫ Inspiron 16 7620 2-in-1 Version -
Dell ≫ Inspiron 16 Plus 7620 Firmware Version < 1.13.0
   Dell ≫ Inspiron 16 Plus 7620 Version -
Dell ≫ Inspiron 3511 Firmware Version < 1.22.1
   Dell ≫ Inspiron 3511 Version -
Dell ≫ Inspiron 3520 Firmware Version < 1.15.0
   Dell ≫ Inspiron 3520 Version -
Dell ≫ Inspiron 3891 Firmware Version < 1.18.1
   Dell ≫ Inspiron 3891 Version -
Dell ≫ Inspiron 3910 Firmware Version < 1.13.0
   Dell ≫ Inspiron 3910 Version -
Dell ≫ Inspiron 5310 Firmware Version < 2.20.1
   Dell ≫ Inspiron 5310 Version -
Dell ≫ Inspiron 5320 Firmware Version < 1.11.1
   Dell ≫ Inspiron 5320 Version -
Dell ≫ Inspiron 5410 Firmware Version < 2.19.1
   Dell ≫ Inspiron 5410 Version -
Dell ≫ Inspiron 5420 Firmware Version < 1.14.1
   Dell ≫ Inspiron 5420 Version -
Dell ≫ Inspiron 5620 Firmware Version < 1.14.1
   Dell ≫ Inspiron 5620 Version -
Dell ≫ Inspiron 7420 Firmware Version < 1.12.1
   Dell ≫ Inspiron 7420 Version -
Dell ≫ Inspiron 7510 Firmware Version < 1.16.1
   Dell ≫ Inspiron 7510 Version -
Dell ≫ Inspiron 7610 Firmware Version < 1.16.1
   Dell ≫ Inspiron 7610 Version -
Dell ≫ Latitude 3120 Firmware Version < 1.17.2
   Dell ≫ Latitude 3120 Version -
Dell ≫ Latitude 3320 Firmware Version < 1.22.2
   Dell ≫ Latitude 3320 Version -
Dell ≫ Latitude 3330 Firmware Version < 1.13.0
   Dell ≫ Latitude 3330 Version -
Dell ≫ Latitude 3420 Firmware Version < 1.29.0
   Dell ≫ Latitude 3420 Version -
Dell ≫ Latitude 3430 Firmware Version < 1.10.1
   Dell ≫ Latitude 3430 Version -
Dell ≫ Latitude 3520 Firmware Version < 1.29.0
   Dell ≫ Latitude 3520 Version -
Dell ≫ Latitude 3530 Firmware Version < 1.10.1
   Dell ≫ Latitude 3530 Version -
Dell ≫ Latitude 5320 Firmware Version < 1.28.1
   Dell ≫ Latitude 5320 Version -
Dell ≫ Latitude 5330 Firmware Version < 1.13.1
   Dell ≫ Latitude 5330 Version -
Dell ≫ Latitude 5520 Firmware Version < 1.28.1
   Dell ≫ Latitude 5520 Version -
Dell ≫ Latitude 5530 Firmware Version < 1.13.2
   Dell ≫ Latitude 5530 Version -
Dell ≫ Latitude 5531 Firmware Version < 1.14.1
   Dell ≫ Latitude 5531 Version -
Dell ≫ Latitude 7330 Firmware Version < 1.14.1
   Dell ≫ Latitude 7330 Version -
Dell ≫ Latitude 7430 Firmware Version < 1.14.1
   Dell ≫ Latitude 7430 Version -
Dell ≫ Latitude 7530 Firmware Version < 1.14.1
   Dell ≫ Latitude 7530 Version -
Dell ≫ Latitude Rugged 5430 Firmware Version < 1.18.1
   Dell ≫ Latitude Rugged 5430 Version -
Dell ≫ Latitude Rugged 7330 Firmware Version < 1.18.1
   Dell ≫ Latitude Rugged 7330 Version -
Dell ≫ Optiplex 3000 Firmware Version < 1.13.1
   Dell ≫ Optiplex 3000 Version -
Dell ≫ Optiplex 5000 Firmware Version < 1.13.1
   Dell ≫ Optiplex 5000 Version -
Dell ≫ Optiplex 5400 Firmware Version < 1.1.28
   Dell ≫ Optiplex 5400 Version -
Dell ≫ Optiplex 7000 Firmware Version < 1.13.1
   Dell ≫ Optiplex 7000 Version -
Dell ≫ Optiplex 7000 Oem Firmware Version < 1.13.1
   Dell ≫ Optiplex 7000 Oem Version -
Dell ≫ Optiplex 7400 Firmware Version < 1.1.28
   Dell ≫ Optiplex 7400 Version -
Dell ≫ Optiplex 7410 All-in-one Firmware Version < 1.4.1
   Dell ≫ Optiplex 7410 All-in-one Version -
Dell ≫ Precision 3560 Firmware Version < 1.28.1
   Dell ≫ Precision 3560 Version -
Dell ≫ Precision 3570 Firmware Version < 1.13.2
   Dell ≫ Precision 3570 Version -
Dell ≫ Precision 3571 Firmware Version < 1.14.1
   Dell ≫ Precision 3571 Version -
Dell ≫ Precision 5760 Firmware Version < 1.20.1
   Dell ≫ Precision 5760 Version -
Dell ≫ Precision 5770 Firmware Version < 1.17.1
   Dell ≫ Precision 5770 Version -
Dell ≫ Vostro 3420 Firmware Version < 1.15.0
   Dell ≫ Vostro 3420 Version -
Dell ≫ Vostro 3510 Firmware Version < 1.22.1
   Dell ≫ Vostro 3510 Version -
Dell ≫ Vostro 3520 Firmware Version < 1.15.0
   Dell ≫ Vostro 3520 Version -
Dell ≫ Vostro 3910 Firmware Version < 1.13.0
   Dell ≫ Vostro 3910 Version -
Dell ≫ Vostro 5310 Firmware Version < 2.20.1
   Dell ≫ Vostro 5310 Version -
Dell ≫ Vostro 5320 Firmware Version < 1.11.1
   Dell ≫ Vostro 5320 Version -
Dell ≫ Vostro 5410 Firmware Version < 2.19.1
   Dell ≫ Vostro 5410 Version -
Dell ≫ Vostro 5510 Firmware Version < 2.19.1
   Dell ≫ Vostro 5510 Version -
Dell ≫ Vostro 5620 Firmware Version < 1.14.1
   Dell ≫ Vostro 5620 Version -
Dell ≫ Vostro 7510 Firmware Version < 1.16.1
   Dell ≫ Vostro 7510 Version -
Dell ≫ Vostro 7620 Firmware Version < 1.13.0
   Dell ≫ Vostro 7620 Version -
Dell ≫ Xps 13 9315 2-in-1 Firmware Version < 1.8.1
   Dell ≫ Xps 13 9315 2-in-1 Version -
Dell ≫ Xps 17 9710 Firmware Version < 1.20.1
   Dell ≫ Xps 17 9710 Version -
Dell ≫ Xps 17 9720 Firmware Version < 1.17.1
   Dell ≫ Xps 17 9720 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.176
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EMC 3.5 0.9 2.5
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.dell.com/support/kbdoc/en-us/000214778/dsa-2023-174-dell-client-bios-security-update-for-an-out-of-bounds-write-vulnerability
Vendor Advisory