CVE-2023-32475

EUVD-2023-36719
Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.6 HIGH
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
dellvostro_5625_firmware
𝑥
< 1.13.0
dellvostro_5515_firmware
𝑥
< 1.19.0
dellvostro_5415_firmware
𝑥
< 1.19.0
dellvostro_3405_firmware
𝑥
< 1.16.0
dellvostro_16_5635_firmware
𝑥
< 1.8.0
dellvostro_15_3535_firmware
𝑥
< 1.12.0
dellvostro_15_3525_firmware
𝑥
< 1.15.1
dellvostro_15_3515_firmware
𝑥
< 1.16.0
dellvostro_14_3435_firmware
𝑥
< 1.12.0
dellvostro_14_3425_firmware
𝑥
< 1.15.1
dellinspiron_7415_2-in-1_firmware
𝑥
< 1.19.0
dellinspiron_7405_2-in-1_firmware
𝑥
< 1.15.0
dellinspiron_5515_firmware
𝑥
< 1.19.0
dellinspiron_5505_firmware
𝑥
< 1.14.0
dellinspiron_5415_firmware
𝑥
< 1.19.0
dellinspiron_5405_firmware
𝑥
< 1.14.0
dellinspiron_3505_firmware
𝑥
< 1.16.0
dellinspiron_24_5415_all-in-one_firmware
𝑥
< 1.17.0
dellinspiron_16_7635_2-in-1_firmware
𝑥
< 1.8.0
dellinspiron_16_5635_firmware
𝑥
< 1.8.0
dellinspiron_16_5625_firmware
𝑥
< 1.13.0
dellinspiron_15_3535_firmware
𝑥
< 1.12.0
dellinspiron_15_3525_firmware
𝑥
< 1.15.1
dellinspiron_15_3515_firmware
𝑥
< 1.16.0
dellinspiron_14_7435_2-in-1_firmware
𝑥
< 1.8.0
dellinspiron_14_7425_2-in-1_firmware
𝑥
< 1.13.0
dellinspiron_14_5435_firmware
𝑥
< 1.8.0
dellinspiron_14_5425_firmware
𝑥
< 1.13.0
dellg5_5505_firmware
𝑥
< 1.18.0
dellg15_5535_firmware
𝑥
< 1.5.0
dellg15_5525_firmware
𝑥
< 1.15.0
dellg15_5515_firmware
𝑥
< 1.15.0
dellalienware_m18_firmware
𝑥
< 1.9.0
dellalienware_m17_r5_amd_firmware
𝑥
< 1.15.0
dellalienware_m16_r1_amd_firmware
𝑥
< 1.9.0
dellalienware_m15_ryzen_edition_r5_firmware
𝑥
< 1.16.0
dellalienware_m15_r7_amd_firmware
𝑥
< 1.15.0
dellalienware_aurora_ryzen_edition_r14_firmware
𝑥
< 2.16.0
dellalienware_aurora_r15_amd_firmware
𝑥
< 1.13.0
dellalienware_aurora_r10_firmware
𝑥
< 2.6.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
dellcpg_bios
𝑥
≤ 2.6
ADP