CVE-2023-32475

Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.6 HIGH
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
dellCNA
7.6 HIGH
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA-ADPADP
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
VendorProductVersion
dellvostro_5625_firmware
𝑥
< 1.13.0
dellvostro_5515_firmware
𝑥
< 1.19.0
dellvostro_5415_firmware
𝑥
< 1.19.0
dellvostro_3405_firmware
𝑥
< 1.16.0
dellvostro_16_5635_firmware
𝑥
< 1.8.0
dellvostro_15_3535_firmware
𝑥
< 1.12.0
dellvostro_15_3525_firmware
𝑥
< 1.15.1
dellvostro_15_3515_firmware
𝑥
< 1.16.0
dellvostro_14_3435_firmware
𝑥
< 1.12.0
dellvostro_14_3425_firmware
𝑥
< 1.15.1
dellinspiron_7415_2-in-1_firmware
𝑥
< 1.19.0
dellinspiron_7405_2-in-1_firmware
𝑥
< 1.15.0
dellinspiron_5515_firmware
𝑥
< 1.19.0
dellinspiron_5505_firmware
𝑥
< 1.14.0
dellinspiron_5415_firmware
𝑥
< 1.19.0
dellinspiron_5405_firmware
𝑥
< 1.14.0
dellinspiron_3505_firmware
𝑥
< 1.16.0
dellinspiron_24_5415_all-in-one_firmware
𝑥
< 1.17.0
dellinspiron_16_7635_2-in-1_firmware
𝑥
< 1.8.0
dellinspiron_16_5635_firmware
𝑥
< 1.8.0
dellinspiron_16_5625_firmware
𝑥
< 1.13.0
dellinspiron_15_3535_firmware
𝑥
< 1.12.0
dellinspiron_15_3525_firmware
𝑥
< 1.15.1
dellinspiron_15_3515_firmware
𝑥
< 1.16.0
dellinspiron_14_7435_2-in-1_firmware
𝑥
< 1.8.0
dellinspiron_14_7425_2-in-1_firmware
𝑥
< 1.13.0
dellinspiron_14_5435_firmware
𝑥
< 1.8.0
dellinspiron_14_5425_firmware
𝑥
< 1.13.0
dellg5_5505_firmware
𝑥
< 1.18.0
dellg15_5535_firmware
𝑥
< 1.5.0
dellg15_5525_firmware
𝑥
< 1.15.0
dellg15_5515_firmware
𝑥
< 1.15.0
dellalienware_m18_firmware
𝑥
< 1.9.0
dellalienware_m17_r5_amd_firmware
𝑥
< 1.15.0
dellalienware_m16_r1_amd_firmware
𝑥
< 1.9.0
dellalienware_m15_ryzen_edition_r5_firmware
𝑥
< 1.16.0
dellalienware_m15_r7_amd_firmware
𝑥
< 1.15.0
dellalienware_aurora_ryzen_edition_r14_firmware
𝑥
< 2.16.0
dellalienware_aurora_r15_amd_firmware
𝑥
< 1.13.0
dellalienware_aurora_r10_firmware
𝑥
< 2.6.0
𝑥
= Vulnerable software versions