medium4.6
CVE-2023-32453
Dell BIOS contains an improper authentication vulnerability.
Impact
Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may potentially exploit this vulnerability in order to modify a security-critical UEFI variable without knowledge of the BIOS administrator.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware M15 R7 Firmware | before 1.18.0 |
| Dell | Alienware M16 Firmware | before 1.10.1 |
| Dell | Alienware M18 Firmware | before 1.10.1 |
| Dell | Chengming 3900 Firmware | before 1.15.0 |
| Dell | Chengming 3901 Firmware | before 1.15.0 |
| Dell | Chengming 3910 Firmware | before 1.6.0 |
| Dell | Chengming 3911 Firmware | before 1.6.0 |
| Dell | G15 5520 Firmware | before 1.18.0 |
| Dell | G16 7620 Firmware | before 1.18.0 |
| Dell | G3 3500 Firmware | before 1.26.0 |
| Dell | G5 15 5500 Firmware | before 1.26.0 |
| Dell | G7 15 7500 Firmware | before 1.26.0 |