Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-32475

Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.

Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.6, with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 80 products from dell, from dell, from dell and 77 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2024, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2024-06-07T03:15:08.950

Last Modified

2024-11-21T08:03:25.883

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.6 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-353
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System dell vostro_5625_firmware < 1.13.0 Yes
Hardware dell vostro_5625 - No
Operating System dell vostro_5515_firmware < 1.19.0 Yes
Hardware dell vostro_5515 - No
Operating System dell vostro_5415_firmware < 1.19.0 Yes
Hardware dell vostro_5415 - No
Operating System dell vostro_3405_firmware < 1.16.0 Yes
Hardware dell vostro_3405 - No
Operating System dell vostro_16_5635_firmware < 1.8.0 Yes
Hardware dell vostro_16_5635 - No
Operating System dell vostro_15_3535_firmware < 1.12.0 Yes
Hardware dell vostro_15_3535 - No
Operating System dell vostro_15_3525_firmware < 1.15.1 Yes
Hardware dell vostro_15_3525 - No
Operating System dell vostro_15_3515_firmware < 1.16.0 Yes
Hardware dell vostro_15_3515 - No
Operating System dell vostro_14_3435_firmware < 1.12.0 Yes
Hardware dell vostro_14_3435 - No
Operating System dell vostro_14_3425_firmware < 1.15.1 Yes
Hardware dell vostro_14_3425 - No
Operating System dell inspiron_7415_2-in-1_firmware < 1.19.0 Yes
Hardware dell inspiron_7415_2-in-1 - No
Operating System dell inspiron_7405_2-in-1_firmware < 1.15.0 Yes
Hardware dell inspiron_7405_2-in-1 - No
Operating System dell inspiron_5515_firmware < 1.19.0 Yes
Hardware dell inspiron_5515 - No
Operating System dell inspiron_5505_firmware < 1.14.0 Yes
Hardware dell inspiron_5505 - No
Operating System dell inspiron_5415_firmware < 1.19.0 Yes
Hardware dell inspiron_5415 - No
Operating System dell inspiron_5405_firmware < 1.14.0 Yes
Hardware dell inspiron_5405 - No
Operating System dell inspiron_3505_firmware < 1.16.0 Yes
Hardware dell inspiron_3505 - No
Operating System dell inspiron_24_5415_all-in-one_firmware < 1.17.0 Yes
Hardware dell inspiron_24_5415_all-in-one - No
Operating System dell inspiron_16_7635_2-in-1_firmware < 1.8.0 Yes
Hardware dell inspiron_16_7635_2-in-1 - No
Operating System dell inspiron_16_5635_firmware < 1.8.0 Yes
Hardware dell inspiron_16_5635 - No
Operating System dell inspiron_16_5625_firmware < 1.13.0 Yes
Hardware dell inspiron_16_5625 - No
Operating System dell inspiron_15_3535_firmware < 1.12.0 Yes
Hardware dell inspiron_15_3535 - No
Operating System dell inspiron_15_3525_firmware < 1.15.1 Yes
Hardware dell inspiron_15_3525 - No
Operating System dell inspiron_15_3515_firmware < 1.16.0 Yes
Hardware dell inspiron_15_3515 - No
Operating System dell inspiron_14_7435_2-in-1_firmware < 1.8.0 Yes
Hardware dell inspiron_14_7435_2-in-1 - No
Operating System dell inspiron_14_7425_2-in-1_firmware < 1.13.0 Yes
Hardware dell inspiron_14_7425_2-in-1 - No
Operating System dell inspiron_14_5435_firmware < 1.8.0 Yes
Hardware dell inspiron_14_5435 - No
Operating System dell inspiron_14_5425_firmware < 1.13.0 Yes
Hardware dell inspiron_14_5425 - No
Operating System dell g5_5505_firmware < 1.18.0 Yes
Hardware dell g5_5505 - No
Operating System dell g15_5535_firmware < 1.5.0 Yes
Hardware dell g15_5535 - No
Operating System dell g15_5525_firmware < 1.15.0 Yes
Hardware dell g15_5525 - No
Operating System dell g15_5515_firmware < 1.15.0 Yes
Hardware dell g15_5515 - No
Operating System dell alienware_m18_firmware < 1.9.0 Yes
Hardware dell alienware_m18 - No
Operating System dell alienware_m17_r5_amd_firmware < 1.15.0 Yes
Hardware dell alienware_m17_r5_amd - No
Operating System dell alienware_m16_r1_amd_firmware < 1.9.0 Yes
Hardware dell alienware_m16_r1_amd - No
Operating System dell alienware_m15_ryzen_edition_r5_firmware < 1.16.0 Yes
Hardware dell alienware_m15_ryzen_edition_r5 - No
Operating System dell alienware_m15_r7_amd_firmware < 1.15.0 Yes
Hardware dell alienware_m15_r7_amd - No
Operating System dell alienware_aurora_ryzen_edition_r14_firmware < 2.16.0 Yes
Hardware dell alienware_aurora_ryzen_edition_r14 - No
Operating System dell alienware_aurora_r15_amd_firmware < 1.13.0 Yes
Hardware dell alienware_aurora_r15_amd - No
Operating System dell alienware_aurora_r10_firmware < 2.6.0 Yes
Hardware dell alienware_aurora_r10 - No
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For dell's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.