CVE-2023-39251

published 2023-12-22

CVE-2023-39251: Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.

Affected

18 ranges

Vendor	Product	Version range	Fixed in
dell	cpg_bios	—	—
dell	cpg_bios	—	—
dell	cpg_bios	—	—
dell	cpg_bios	—	—
dell	cpg_bios	—	—
dell	inspiron_7510_firmware	< 1.20.0	1.20.0
dell	inspiron_7610_firmware	< 1.20.0	1.20.0
dell	latitude_5430_rugged_firmware	< 1.23.0	1.23.0
dell	latitude_5521_firmware	< 1.27.0	1.27.0
dell	latitude_7330_rugged_firmware	< 1.23.0	1.23.0
dell	precision_3561_firmware	< 1.27.0	1.27.0
dell	precision_5560_firmware	< 1.25.0	1.25.0
dell	precision_5760_firmware	< 1.24.0	1.24.0
dell	precision_7560_firmware	< 1.27.0	1.27.0
dell	precision_7760_firmware	< 1.27.0	1.27.0
dell	vostro_7510_firmware	< 1.20.0	1.20.0
dell	xps_15_9510_firmware	< 1.25.0	1.25.0
dell	xps_17_9710_firmware	< 1.24.0	1.24.0

CWE-20