medium6.9
CVE-2023-28075
Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS.
Impact
Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware M15 R7 Firmware | before 1.18.0 |
| Dell | Alienware M16 Firmware | before 1.10.1 |
| Dell | Alienware M18 Firmware | before 1.10.1 |
| Dell | Chengming 3900 Firmware | before 1.15.0 |
| Dell | Chengming 3901 Firmware | before 1.15.0 |
| Dell | Chengming 3910 Firmware | before 1.6.0 |
| Dell | Chengming 3911 Firmware | before 1.6.0 |
| Dell | Chengming 3980 Firmware | before 2.32.0 |
| Dell | Chengming 3990 Firmware | before 1.21.0 |
| Dell | Chengming 3991 Firmware | before 1.21.0 |
| Dell | G15 5520 Firmware | before 1.18.0 |
| Dell | G16 7620 Firmware | before 1.18.0 |