CVE-2023-28064 : Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated phys

Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.

Published 2023-06-23 11:15:10

Updated 2023-06-30 21:18:13

Source Dell

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Products affected by CVE-2023-28064

Dell » Alienware M15 R6 Firmware
Versions before (<) 1.22.1
cpe:2.3:o:dell:alienware_m15_r6_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Alienware M15 R6 » Version: N/A
Dell » G15 5510 Firmware
Versions before (<) 1.19.0
cpe:2.3:o:dell:g15_5510_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G15 5510 » Version: N/A
Dell » G15 5511 Firmware
Versions before (<) 1.22.1
cpe:2.3:o:dell:g15_5511_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G15 5511 » Version: N/A
Dell » Inspiron 14 5418 Firmware
Versions before (<) 2.19.1
cpe:2.3:o:dell:inspiron_14_5418_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 14 5418 » Version: N/A
Dell » Inspiron 15 5518 Firmware
Versions before (<) 2.19.1
cpe:2.3:o:dell:inspiron_15_5518_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 15 5518 » Version: N/A
Dell » Inspiron 3891 Firmware
Versions before (<) 1.18.1
cpe:2.3:o:dell:inspiron_3891_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3891 » Version: N/A
Dell » Inspiron 5310 Firmware
Versions before (<) 2.20.1
cpe:2.3:o:dell:inspiron_5310_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5310 » Version: N/A
Dell » Inspiron 7610 Firmware
Versions before (<) 1.16.1
cpe:2.3:o:dell:inspiron_7610_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7610 » Version: N/A
Dell » Latitude 3120 Firmware
Versions before (<) 1.17.2
cpe:2.3:o:dell:latitude_3120_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3120 » Version: N/A
Dell » Latitude 3320 Firmware
Versions before (<) 1.22.2
cpe:2.3:o:dell:latitude_3320_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3320 » Version: N/A
Dell » Latitude 3420 Firmware
Versions before (<) 1.29.0
cpe:2.3:o:dell:latitude_3420_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3420 » Version: N/A
Dell » Latitude 3520 Firmware
Versions before (<) 1.29.0
cpe:2.3:o:dell:latitude_3520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3520 » Version: N/A
Dell » Latitude 5320 Firmware
Versions before (<) 1.28.1
cpe:2.3:o:dell:latitude_5320_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5320 » Version: N/A
Dell » Latitude 5520 Firmware
Versions before (<) 1.28.1
cpe:2.3:o:dell:latitude_5520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5520 » Version: N/A
Dell » Precision 3560 Firmware
Versions before (<) 1.28.1
cpe:2.3:o:dell:precision_3560_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 3560 » Version: N/A
Dell » Precision 5760 Firmware
Versions before (<) 1.20.1
cpe:2.3:o:dell:precision_5760_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 5760 » Version: N/A
Dell » Vostro 5310 Firmware
Versions before (<) 2.20.1
cpe:2.3:o:dell:vostro_5310_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 5310 » Version: N/A
Dell » Xps 17 9710 Firmware
Versions before (<) 1.20.1
cpe:2.3:o:dell:xps_17_9710_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xps 17 9710 » Version: N/A
Dell » Inspiron 14 5410 Firmware
Versions before (<) 2.19.1
cpe:2.3:o:dell:inspiron_14_5410_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 14 5410 » Version: N/A
Dell » Inspiron 3511 Firmware
Versions before (<) 1.22.1
cpe:2.3:o:dell:inspiron_3511_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3511 » Version: N/A
Dell » Inspiron 5410 Firmware
Versions before (<) 2.19.1
cpe:2.3:o:dell:inspiron_5410_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5410 » Version: N/A
Dell » Inspiron 7510 Firmware
Versions before (<) 1.16.1
cpe:2.3:o:dell:inspiron_7510_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7510 » Version: N/A
Dell » Inspiron 15 5510 Firmware
Versions before (<) 2.19.1
cpe:2.3:o:dell:inspiron_15_5510_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 15 5510 » Version: N/A
Dell » Latitude Rugged 5430 Firmware
Versions before (<) 1.18.1
cpe:2.3:o:dell:latitude_rugged_5430_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude Rugged 5430 » Version: N/A
Dell » Latitude Rugged 7330 Firmware
Versions before (<) 1.18.1
cpe:2.3:o:dell:latitude_rugged_7330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude Rugged 7330 » Version: N/A
Dell » Vostro 3510 Firmware
Versions before (<) 1.22.1
cpe:2.3:o:dell:vostro_3510_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3510 » Version: N/A
Dell » Vostro 5410 Firmware
Versions before (<) 2.19.1
cpe:2.3:o:dell:vostro_5410_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 5410 » Version: N/A
Dell » Vostro 5510 Firmware
Versions before (<) 2.19.1
cpe:2.3:o:dell:vostro_5510_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 5510 » Version: N/A
Dell » Vostro 7510 Firmware
Versions before (<) 1.16.1
cpe:2.3:o:dell:vostro_7510_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 7510 » Version: N/A
Dell » Inspiron 3910 Firmware
Versions before (<) 1.13.0
cpe:2.3:o:dell:inspiron_3910_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3910 » Version: N/A
Dell » Vostro 3910 Firmware
Versions before (<) 1.13.0
cpe:2.3:o:dell:vostro_3910_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3910 » Version: N/A
Dell » Chengming 3900 Firmware
Versions before (<) 1.13.0
cpe:2.3:o:dell:chengming_3900_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Chengming 3900 » Version: N/A
Dell » Inspiron 14 Plus 7420 Firmware
Versions before (<) 1.13.0
cpe:2.3:o:dell:inspiron_14_plus_7420_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 14 Plus 7420 » Version: N/A
Dell » Inspiron 16 Plus 7620 Firmware
Versions before (<) 1.13.0
cpe:2.3:o:dell:inspiron_16_plus_7620_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 16 Plus 7620 » Version: N/A
Dell » Inspiron 5320 Firmware
Versions before (<) 1.11.1
cpe:2.3:o:dell:inspiron_5320_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5320 » Version: N/A
Dell » Inspiron 5420 Firmware
Versions before (<) 1.14.1
cpe:2.3:o:dell:inspiron_5420_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5420 » Version: N/A
Dell » Inspiron 5620 Firmware
Versions before (<) 1.14.1
cpe:2.3:o:dell:inspiron_5620_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5620 » Version: N/A
Dell » Inspiron 7420 Firmware
Versions before (<) 1.12.1
cpe:2.3:o:dell:inspiron_7420_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7420 » Version: N/A
Dell » Optiplex 3000 Firmware
Versions before (<) 1.13.1
cpe:2.3:o:dell:optiplex_3000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Optiplex 3000 » Version: N/A
Dell » Optiplex 5000 Firmware
Versions before (<) 1.13.1
cpe:2.3:o:dell:optiplex_5000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Optiplex 5000 » Version: N/A
Dell » Optiplex 5400 Firmware
Versions before (<) 1.1.28
cpe:2.3:o:dell:optiplex_5400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Optiplex 5400 » Version: N/A
Dell » Optiplex 7000 Firmware
Versions before (<) 1.13.1
cpe:2.3:o:dell:optiplex_7000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Optiplex 7000 » Version: N/A
Dell » Optiplex 7000 Oem Firmware
Versions before (<) 1.13.1
cpe:2.3:o:dell:optiplex_7000_oem_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Optiplex 7000 Oem » Version: N/A
Dell » Optiplex 7400 Firmware
Versions before (<) 1.1.28
cpe:2.3:o:dell:optiplex_7400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Optiplex 7400 » Version: N/A
Dell » Precision 5770 Firmware
Versions before (<) 1.17.1
cpe:2.3:o:dell:precision_5770_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 5770 » Version: N/A
Dell » Vostro 5320 Firmware
Versions before (<) 1.11.1
cpe:2.3:o:dell:vostro_5320_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 5320 » Version: N/A
Dell » Vostro 5620 Firmware
Versions before (<) 1.14.1
cpe:2.3:o:dell:vostro_5620_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 5620 » Version: N/A
Dell » Vostro 7620 Firmware
Versions before (<) 1.13.0
cpe:2.3:o:dell:vostro_7620_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 7620 » Version: N/A
Dell » Xps 17 9720 Firmware
Versions before (<) 1.17.1
cpe:2.3:o:dell:xps_17_9720_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xps 17 9720 » Version: N/A
Dell » Alienware M15 R7 Firmware
Versions before (<) 1.17.0
cpe:2.3:o:dell:alienware_m15_r7_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Alienware M15 R7 » Version: N/A
Dell » Inspiron 15 3511 Firmware
Versions before (<) 1.22.1
cpe:2.3:o:dell:inspiron_15_3511_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 15 3511 » Version: N/A
Dell » G15 5520 Firmware
Versions before (<) 1.17.0
cpe:2.3:o:dell:g15_5520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G15 5520 » Version: N/A
Dell » Inspiron 3520 Firmware
Versions before (<) 1.15.0
cpe:2.3:o:dell:inspiron_3520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3520 » Version: N/A
Dell » Latitude 3330 Firmware
Versions before (<) 1.13.0
cpe:2.3:o:dell:latitude_3330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3330 » Version: N/A
Dell » Latitude 3430 Firmware
Versions before (<) 1.10.1
cpe:2.3:o:dell:latitude_3430_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3430 » Version: N/A
Dell » Latitude 3530 Firmware
Versions before (<) 1.10.1
cpe:2.3:o:dell:latitude_3530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3530 » Version: N/A
Dell » Latitude 5330 Firmware
Versions before (<) 1.13.1
cpe:2.3:o:dell:latitude_5330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5330 » Version: N/A
Dell » Latitude 5530 Firmware
Versions before (<) 1.13.2
cpe:2.3:o:dell:latitude_5530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5530 » Version: N/A
Dell » Latitude 5531 Firmware
Versions before (<) 1.14.1
cpe:2.3:o:dell:latitude_5531_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5531 » Version: N/A
Dell » Latitude 7330 Firmware
Versions before (<) 1.14.1
cpe:2.3:o:dell:latitude_7330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7330 » Version: N/A
Dell » Latitude 7430 Firmware
Versions before (<) 1.14.1
cpe:2.3:o:dell:latitude_7430_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7430 » Version: N/A
Dell » Latitude 7530 Firmware
Versions before (<) 1.14.1
cpe:2.3:o:dell:latitude_7530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7530 » Version: N/A
Dell » Precision 3570 Firmware
Versions before (<) 1.13.2
cpe:2.3:o:dell:precision_3570_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 3570 » Version: N/A
Dell » Precision 3571 Firmware
Versions before (<) 1.14.1
cpe:2.3:o:dell:precision_3571_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 3571 » Version: N/A
Dell » Vostro 3420 Firmware
Versions before (<) 1.15.0
cpe:2.3:o:dell:vostro_3420_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3420 » Version: N/A
Dell » Vostro 3520 Firmware
Versions before (<) 1.15.0
cpe:2.3:o:dell:vostro_3520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3520 » Version: N/A
Dell » Xps 13 9315 2-in-1 Firmware
Versions before (<) 1.8.1
cpe:2.3:o:dell:xps_13_9315_2-in-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xps 13 9315 2-in-1 » Version: N/A
Dell » Chengming 3901 Firmware
Versions before (<) 1.13.0
cpe:2.3:o:dell:chengming_3901_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Chengming 3901 » Version: N/A
Dell » Inspiron 16 7620 2-in-1 Firmware
Versions before (<) 1.12.1
cpe:2.3:o:dell:inspiron_16_7620_2-in-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 16 7620 2-in-1 » Version: N/A
Dell » Optiplex 7410 All-in-one Firmware
Versions before (<) 1.4.1
cpe:2.3:o:dell:optiplex_7410_all-in-one_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Optiplex 7410 All-in-one » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-28064

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 15 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-28064

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	0.9	3.6	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
3.5	LOW	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N	0.9	2.5	Dell
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: None

CWE ids for CVE-2023-28064

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: security_alert@emc.com (Primary)

References for CVE-2023-28064

https://www.dell.com/support/kbdoc/en-us/000214778/dsa-2023-174-dell-client-bios-security-update-for-an-out-of-bounds-write-vulnerability

Access Denied
Vendor Advisory

Jump to

Vulnerability Details : CVE-2023-28064

Products affected by CVE-2023-28064

Exploit prediction scoring system (EPSS) score for CVE-2023-28064

CVSS scores for CVE-2023-28064

CWE ids for CVE-2023-28064

References for CVE-2023-28064