CVE-2023-32480

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-32480
Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability to perform arbitrary code execution.

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000214779/dsa-2023-175-dell-client-bios-security-update-for-an-improper-input-validation-vulnerability Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dell:alienware_m15_r7_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_m15_r7:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dell:g15_5510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:g15_5510:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dell:g15_5520_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:g15_5520:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:dell:inspiron_14_5410_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_14_5410:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:dell:inspiron_14_5418_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_14_5418:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:dell:inspiron_15_5510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_15_5510:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:dell:inspiron_15_5518_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_15_5518:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:dell:inspiron_16_7620_2-in-1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_16_7620_2-in-1:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:dell:inspiron_3520_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3520:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:dell:inspiron_5410_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_5410:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:dell:inspiron_5420_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_5420:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:dell:inspiron_5620_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_5620:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:dell:inspiron_7420_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7420:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:dell:inspiron_7510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7510:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:dell:inspiron_7610_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7610:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:dell:latitude_3320_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3320:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:dell:latitude_3420_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3420:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:dell:latitude_3430_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3430:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:dell:latitude_3520_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3520:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:dell:latitude_3530_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3530:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:dell:precision_5760_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_5760:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:dell:precision_5770_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_5770:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:dell:vostro_3420_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3420:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:dell:vostro_3520_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3520:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:dell:vostro_5410_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_5410:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:dell:vostro_5510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_5510:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:dell:vostro_5620_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_5620:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:dell:vostro_7510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_7510:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:dell:xps_13_9315_2-in-1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_13_9315_2-in-1:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:dell:xps_17_9710_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_17_9710:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:dell:xps_17_9720_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_17_9720:-:*:*:*:*:*:*:*
History

30 Jun 2023, 21:17

Type Values Removed Values Added
CPE cpe:2.3:o:dell:inspiron_5620_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_15_5510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_5760:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_3420_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3420:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7510:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_17_9720:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_14_5410_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_15_5510:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_5620:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:xps_17_9710_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:latitude_3520_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_5410:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_17_9710:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_15_5518:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_5620:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:g15_5520_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:alienware_m15_r7_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_5420:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_16_7620_2-in-1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3520:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_7510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_5410:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_7610_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:precision_5770_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:alienware_m15_r7:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:xps_13_9315_2-in-1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:g15_5510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_14_5418:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_5420_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7610:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_3520_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_15_5518_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:latitude_3420_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:latitude_3430_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_5510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_3520_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_7420_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_5410_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_7510:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:g15_5510:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3320:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_13_9315_2-in-1:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_3520:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_16_7620_2-in-1:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_5510:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:xps_17_9720_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:g15_5520:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_3520:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:latitude_3530_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_5410_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3420:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:precision_5760_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_5620_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:latitude_3320_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3430:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_14_5418_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_14_5410:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_7510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7420:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_5770:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3530:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.8
References (MISC) https://www.dell.com/support/kbdoc/en-us/000214779/dsa-2023-175-dell-client-bios-security-update-for-an-improper-input-validation-vulnerability - (MISC) https://www.dell.com/support/kbdoc/en-us/000214779/dsa-2023-175-dell-client-bios-security-update-for-an-improper-input-validation-vulnerability - Vendor Advisory
First Time Dell latitude 3520 Firmware
Dell inspiron 7420
Dell g15 5520
Dell vostro 5620
Dell latitude 3530
Dell vostro 5620 Firmware
Dell inspiron 5620 Firmware
Dell latitude 3530 Firmware
Dell inspiron 5420
Dell precision 5770 Firmware
Dell inspiron 14 5410
Dell inspiron 16 7620 2-in-1 Firmware
Dell xps 17 9720
Dell latitude 3430 Firmware
Dell latitude 3420 Firmware
Dell inspiron 15 5518
Dell inspiron 7510 Firmware
Dell latitude 3520
Dell inspiron 15 5510 Firmware
Dell inspiron 5420 Firmware
Dell xps 13 9315 2-in-1
Dell vostro 5510 Firmware
Dell inspiron 7420 Firmware
Dell latitude 3430
Dell precision 5760 Firmware
Dell
Dell vostro 7510 Firmware
Dell latitude 3320 Firmware
Dell inspiron 14 5418
Dell inspiron 14 5410 Firmware
Dell inspiron 3520 Firmware
Dell vostro 5510
Dell latitude 3420
Dell xps 13 9315 2-in-1 Firmware
Dell inspiron 5410 Firmware
Dell inspiron 16 7620 2-in-1
Dell vostro 3420
Dell inspiron 7610
Dell vostro 5410 Firmware
Dell g15 5510
Dell latitude 3320
Dell g15 5510 Firmware
Dell inspiron 7610 Firmware
Dell inspiron 14 5418 Firmware
Dell precision 5760
Dell g15 5520 Firmware
Dell precision 5770
Dell inspiron 5410
Dell vostro 3520 Firmware
Dell inspiron 3520
Dell alienware M15 R7
Dell vostro 7510
Dell xps 17 9710 Firmware
Dell inspiron 15 5510
Dell vostro 5410
Dell inspiron 15 5518 Firmware
Dell alienware M15 R7 Firmware
Dell inspiron 5620
Dell inspiron 7510
Dell xps 17 9710
Dell xps 17 9720 Firmware
Dell vostro 3520
Dell vostro 3420 Firmware

23 Jun 2023, 13:03

Type Values Removed Values Added
New CVE
Information

Published : 2023-06-23 11:15

Updated : 2023-12-10 15:01

NVD link : CVE-2023-32480

Mitre link : CVE-2023-32480

CVE.ORG link : CVE-2023-32480

JSON object : View

Products Affected

dell

  • xps_17_9710
  • alienware_m15_r7
  • inspiron_15_5518
  • vostro_5620
  • inspiron_15_5518_firmware
  • xps_13_9315_2-in-1_firmware
  • g15_5520
  • vostro_5620_firmware
  • inspiron_3520
  • inspiron_5420_firmware
  • inspiron_5410
  • latitude_3420_firmware
  • precision_5770_firmware
  • vostro_3420
  • inspiron_5420
  • inspiron_16_7620_2-in-1_firmware
  • inspiron_15_5510_firmware
  • inspiron_14_5410
  • inspiron_14_5418
  • vostro_3420_firmware
  • inspiron_5410_firmware
  • inspiron_7610
  • xps_17_9720
  • g15_5510_firmware
  • vostro_3520
  • vostro_5410_firmware
  • precision_5760
  • latitude_3320_firmware
  • vostro_7510
  • g15_5520_firmware
  • vostro_5510_firmware
  • alienware_m15_r7_firmware
  • inspiron_7420
  • latitude_3320
  • latitude_3430
  • precision_5760_firmware
  • vostro_7510_firmware
  • g15_5510
  • inspiron_5620_firmware
  • inspiron_16_7620_2-in-1
  • inspiron_14_5410_firmware
  • inspiron_7510
  • inspiron_15_5510
  • inspiron_3520_firmware
  • inspiron_7420_firmware
  • xps_17_9710_firmware
  • latitude_3530
  • xps_13_9315_2-in-1
  • inspiron_5620
  • inspiron_14_5418_firmware
  • inspiron_7510_firmware
  • latitude_3420
  • latitude_3530_firmware
  • latitude_3430_firmware
  • latitude_3520_firmware
  • vostro_5410
  • inspiron_7610_firmware
  • vostro_3520_firmware
  • vostro_5510
  • xps_17_9720_firmware
  • precision_5770
  • latitude_3520
CWE
CWE-20

Improper Input Validation