CVE-2023-28028

published 2023-06-23

CVE-2023-28028: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.

Affected

436 ranges · showing 25

Vendor	Product	Version range	Fixed in
dell	alienware_area_51m_r1_firmware	< 1.26.0	1.26.0
dell	alienware_area_51m_r2_firmware	< 1.22.0	1.22.0
dell	alienware_aurora_r11_firmware	< 1.0.20	1.0.20
dell	alienware_aurora_r12_firmware	< 1.1.20	1.1.20
dell	alienware_aurora_r13_firmware	< 1.12.0	1.12.0
dell	alienware_aurora_r15_firmware	< 1.1.0	1.1.0
dell	alienware_m15_r2_firmware	< 1.22.0	1.22.0
dell	alienware_m15_r3_firmware	< 1.23.0	1.23.0
dell	alienware_m15_r4_firmware	< 1.17.0	1.17.0
dell	alienware_m15_r6_firmware	< 1.21.0	1.21.0
dell	alienware_m15_r7_firmware	< 1.16.0	1.16.0
dell	alienware_m16_firmware	< 1.7.0	1.7.0
dell	alienware_m17_r2_firmware	< 1.22.0	1.22.0
dell	alienware_m17_r3_firmware	< 1.23.0	1.23.0
dell	alienware_m17_r4_firmware	< 1.17.0	1.17.0
dell	alienware_x14_firmware	< 1.12.0	1.12.0
dell	alienware_x15_r1_firmware	< 1.18.0	1.18.0
dell	alienware_x15_r2_firmware	< 1.13.0	1.13.0
dell	alienware_x17_r1_firmware	< 1.18.0	1.18.0
dell	alienware_x17_r2_firmware	< 1.13.0	1.13.0
dell	chengming_3900_firmware	< 1.11.0	1.11.0
dell	chengming_3901_firmware	< 1.11.0	1.11.0
dell	chengming_3910_firmware	< 1.1.0	1.1.0
dell	chengming_3911_firmware	< 1.1.0	1.1.0
dell	chengming_3980_firmware	< 2.29.0	2.29.0

CWE-20