CVE-2023-28036

published 2023-06-23

CVE-2023-28036: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this…

Priority P4 26 medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.

Affected

436 ranges · showing 25

Vendor	Product	Version range	Fixed in
dell	alienware_area_51m_r1_firmware	< 1.26.0	1.26.0
dell	alienware_area_51m_r2_firmware	< 1.22.0	1.22.0
dell	alienware_aurora_r11_firmware	< 1.0.20	1.0.20
dell	alienware_aurora_r12_firmware	< 1.1.20	1.1.20
dell	alienware_aurora_r13_firmware	< 1.12.0	1.12.0
dell	alienware_aurora_r15_firmware	< 1.1.0	1.1.0
dell	alienware_m15_r2_firmware	< 1.22.0	1.22.0
dell	alienware_m15_r3_firmware	< 1.23.0	1.23.0
dell	alienware_m15_r4_firmware	< 1.17.0	1.17.0
dell	alienware_m15_r6_firmware	< 1.21.0	1.21.0
dell	alienware_m15_r7_firmware	< 1.16.0	1.16.0
dell	alienware_m16_firmware	< 1.7.0	1.7.0
dell	alienware_m17_r2_firmware	< 1.22.0	1.22.0
dell	alienware_m17_r3_firmware	< 1.23.0	1.23.0
dell	alienware_m17_r4_firmware	< 1.17.0	1.17.0
dell	alienware_x14_firmware	< 1.12.0	1.12.0
dell	alienware_x15_r1_firmware	< 1.18.0	1.18.0
dell	alienware_x15_r2_firmware	< 1.13.0	1.13.0
dell	alienware_x17_r1_firmware	< 1.18.0	1.18.0
dell	alienware_x17_r2_firmware	< 1.13.0	1.13.0
dell	chengming_3900_firmware	< 1.11.0	1.11.0
dell	chengming_3901_firmware	< 1.11.0	1.11.0
dell	chengming_3910_firmware	< 1.1.0	1.1.0
dell	chengming_3911_firmware	< 1.1.0	1.1.0
dell	chengming_3980_firmware	< 2.29.0	2.29.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20