CVE-2023-32475

EUVD-2023-36719
Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.6 HIGH
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
dellCNA
7.6 HIGH
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 2%
Affected Products (NVD)
VendorProductVersion
dellvostro_5625_firmware
𝑥
< 1.13.0
dellvostro_5515_firmware
𝑥
< 1.19.0
dellvostro_5415_firmware
𝑥
< 1.19.0
dellvostro_3405_firmware
𝑥
< 1.16.0
dellvostro_16_5635_firmware
𝑥
< 1.8.0
dellvostro_15_3535_firmware
𝑥
< 1.12.0
dellvostro_15_3525_firmware
𝑥
< 1.15.1
dellvostro_15_3515_firmware
𝑥
< 1.16.0
dellvostro_14_3435_firmware
𝑥
< 1.12.0
dellvostro_14_3425_firmware
𝑥
< 1.15.1
dellinspiron_7415_2-in-1_firmware
𝑥
< 1.19.0
dellinspiron_7405_2-in-1_firmware
𝑥
< 1.15.0
dellinspiron_5515_firmware
𝑥
< 1.19.0
dellinspiron_5505_firmware
𝑥
< 1.14.0
dellinspiron_5415_firmware
𝑥
< 1.19.0
dellinspiron_5405_firmware
𝑥
< 1.14.0
dellinspiron_3505_firmware
𝑥
< 1.16.0
dellinspiron_24_5415_all-in-one_firmware
𝑥
< 1.17.0
dellinspiron_16_7635_2-in-1_firmware
𝑥
< 1.8.0
dellinspiron_16_5635_firmware
𝑥
< 1.8.0
dellinspiron_16_5625_firmware
𝑥
< 1.13.0
dellinspiron_15_3535_firmware
𝑥
< 1.12.0
dellinspiron_15_3525_firmware
𝑥
< 1.15.1
dellinspiron_15_3515_firmware
𝑥
< 1.16.0
dellinspiron_14_7435_2-in-1_firmware
𝑥
< 1.8.0
dellinspiron_14_7425_2-in-1_firmware
𝑥
< 1.13.0
dellinspiron_14_5435_firmware
𝑥
< 1.8.0
dellinspiron_14_5425_firmware
𝑥
< 1.13.0
dellg5_5505_firmware
𝑥
< 1.18.0
dellg15_5535_firmware
𝑥
< 1.5.0
dellg15_5525_firmware
𝑥
< 1.15.0
dellg15_5515_firmware
𝑥
< 1.15.0
dellalienware_m18_firmware
𝑥
< 1.9.0
dellalienware_m17_r5_amd_firmware
𝑥
< 1.15.0
dellalienware_m16_r1_amd_firmware
𝑥
< 1.9.0
dellalienware_m15_ryzen_edition_r5_firmware
𝑥
< 1.16.0
dellalienware_m15_r7_amd_firmware
𝑥
< 1.15.0
dellalienware_aurora_ryzen_edition_r14_firmware
𝑥
< 2.16.0
dellalienware_aurora_r15_amd_firmware
𝑥
< 1.13.0
dellalienware_aurora_r10_firmware
𝑥
< 2.6.0
𝑥
= Vulnerable software versions