CVE-2023-32480

published 2023-06-23

CVE-2023-32480: Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability to perform…

Priority P4 29 medium 6.8 CVSS 3.1

AV P AC L PR N UI N S U C H I H A H

Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability to perform arbitrary code execution.

Affected

32 ranges · showing 25

Vendor	Product	Version range	Fixed in
dell	alienware_m15_r7_firmware	< 1.17.0	1.17.0
dell	cpg_bios	—	—
dell	g15_5510_firmware	< 1.19.0	1.19.0
dell	g15_5520_firmware	< 1.17.0	1.17.0
dell	inspiron_14_5410_firmware	< 2.19.1	2.19.1
dell	inspiron_14_5418_firmware	< 2.19.1	2.19.1
dell	inspiron_15_5510_firmware	< 2.19.1	2.19.1
dell	inspiron_15_5518_firmware	< 2.19.1	2.19.1
dell	inspiron_16_7620_2-in-1_firmware	< 1.12.1	1.12.1
dell	inspiron_3520_firmware	< 1.15.0	1.15.0
dell	inspiron_5410_firmware	< 2.19.1	2.19.1
dell	inspiron_5420_firmware	< 1.14.1	1.14.1
dell	inspiron_5620_firmware	< 1.14.1	1.14.1
dell	inspiron_7420_firmware	< 1.12.1	1.12.1
dell	inspiron_7510_firmware	< 1.16.1	1.16.1
dell	inspiron_7610_firmware	< 1.16.1	1.16.1
dell	latitude_3320_firmware	< 1.22.2	1.22.2
dell	latitude_3420_firmware	< 1.29.0	1.29.0
dell	latitude_3430_firmware	< 1.10.1	1.10.1
dell	latitude_3520_firmware	< 1.29.0	1.29.0
dell	latitude_3530_firmware	< 1.10.1	1.10.1
dell	precision_5760_firmware	< 1.20.1	1.20.1
dell	precision_5770_firmware	< 1.17.1	1.17.1
dell	vostro_3420_firmware	< 1.15.0	1.15.0
dell	vostro_3520_firmware	< 1.15.0	1.15.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20