Description

Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may potentially exploit this vulnerability in order to modify a security-critical UEFI variable without knowledge of the BIOS administrator.

Related CPE's

o

dell

alienware_m15_r7_firmware

Vulnerable

h

dell

alienware_m15_r7

-

o

dell

alienware_m16_firmware

Vulnerable

h

dell

alienware_m16

-

o

dell

alienware_m18_firmware

Vulnerable

h

dell

alienware_m18

-

o

dell

chengming_3900_firmware

Vulnerable

h

dell

chengming_3900

-

o

dell

chengming_3901_firmware

Vulnerable

h

dell

chengming_3901

-

o

dell

chengming_3910_firmware

Vulnerable

h

dell

chengming_3910

-

o

dell

chengming_3911_firmware

Vulnerable

h

dell

chengming_3911

-

o

dell

g15_5520_firmware

Vulnerable

h

dell

g15_5520

-

o

dell

g16_7620_firmware

Vulnerable

h

dell

g16_7620

-

o

dell

g3_3500_firmware

Vulnerable

h

dell

g3_3500

-

o

dell

g5_15_5500_firmware

Vulnerable

h

dell

g5_15_5500

-

o

dell

g7_15_7500_firmware

Vulnerable

h

dell

g7_15_7500

-

o

dell

g7_17_7700_firmware

Vulnerable

h

dell

g7_17_7700

-

o

dell

precision_5680_firmware

Vulnerable

h

dell

precision_5680

-

o

dell

inspiron_14_5410_firmware

Vulnerable

h

dell

inspiron_14_5410

-

o

dell

inspiron_14_5418_firmware

Vulnerable

h

dell

inspiron_14_5418

-

o

dell

inspiron_15_3511_firmware

Vulnerable

h

dell

inspiron_15_3511

-

o

dell

inspiron_15_5510_firmware

Vulnerable

h

dell

inspiron_15_5510

-

o

dell

inspiron_15_5518_firmware

Vulnerable

h

dell

inspiron_15_5518

-

o

dell

inspiron_24_5420_all-in-one_firmware

Vulnerable

h

dell

inspiron_24_5420_all-in-one

-

o

dell

inspiron_24_5421_all-in-one_firmware

Vulnerable

h

dell

inspiron_24_5421_all-in-one

-

o

dell

inspiron_27_7720_all-in-one_firmware

Vulnerable

h

dell

inspiron_27_7720_all-in-one

-

o

dell

inspiron_3020_small_desktop_firmware

Vulnerable

h

dell

inspiron_3020_small_desktop

-

o

dell

inspiron_3020_desktop_firmware

Vulnerable

h

dell

inspiron_3020_desktop

-

o

dell

inspiron_3493_firmware

Vulnerable

h

dell

inspiron_3493

-

o

dell

inspiron_3511_firmware

Vulnerable

h

dell

inspiron_3511

-

o

dell

inspiron_3593_firmware

Vulnerable

h

dell

inspiron_3593

-

o

dell

inspiron_3793_firmware

Vulnerable

h

dell

inspiron_3793

-

o

dell

inspiron_3891_firmware

Vulnerable

h

dell

inspiron_3891

-

o

dell

inspiron_3910_firmware

Vulnerable

h

dell

inspiron_3910

-

o

dell

inspiron_5410_firmware

Vulnerable

h

dell

inspiron_5410

-

o

dell

inspiron_5493_firmware

Vulnerable

h

dell

inspiron_5493

-

o

dell

inspiron_5593_firmware

Vulnerable

h

dell

inspiron_5593

-

o

dell

inspiron_7300_2-in-1_firmware

Vulnerable

h

dell

inspiron_7300_2-in-1

-

o

dell

inspiron_7490_firmware

Vulnerable

h

dell

inspiron_7490

-

o

dell

inspiron_7500_firmware

Vulnerable

h

dell

inspiron_7500

-

o

dell

inspiron_7500_2-in-1_black_firmware

Vulnerable

h

dell

inspiron_7500_2-in-1_black

-

o

dell

inspiron_7501_firmware

Vulnerable

h

dell

inspiron_7501

-

o

dell

inspiron_7510_firmware

Vulnerable

h

dell

inspiron_7510

-

o

dell

inspiron_7610_firmware

Vulnerable

h

dell

inspiron_7610

-

o

dell

latitude_3140_firmware

Vulnerable

h

dell

latitude_3140

-

o

dell

latitude_3301_firmware

Vulnerable

h

dell

latitude_3301

-

o

dell

latitude_3320_firmware

Vulnerable

h

dell

latitude_3320

-

o

dell

latitude_3330_firmware

Vulnerable

h

dell

latitude_3330

-

o

dell

latitude_3340_firmware

Vulnerable

h

dell

latitude_3340

-

o

dell

latitude_3400_firmware

Vulnerable

h

dell

latitude_3400

-

o

dell

latitude_3430_firmware

Vulnerable

h

dell

latitude_3430

-

o

dell

latitude_3440_firmware

Vulnerable

h

dell

latitude_3440

-

o

dell

latitude_3500_firmware

Vulnerable

h

dell

latitude_3500

-

o

dell

latitude_3530_firmware

Vulnerable

h

dell

latitude_3530

-

o

dell

latitude_3540_firmware

Vulnerable

h

dell

latitude_3540

-

o

dell

latitude_5420_firmware

Vulnerable

h

dell

latitude_5420

-

o

dell

latitude_5430_firmware

Vulnerable

h

dell

latitude_5430

-

o

dell

latitude_5431_firmware

Vulnerable

h

dell

latitude_5431

-

o

dell

latitude_7230_rugged_extreme_tablet_firmware

Vulnerable

h

dell

latitude_7230_rugged_extreme_tablet

-

o

dell

latitude_7320_firmware

Vulnerable

h

dell

latitude_7320

-

o

dell

latitude_7420_firmware

Vulnerable

h

dell

latitude_7420

-

o

dell

latitude_7520_firmware

Vulnerable

h

dell

latitude_7520

-

o

dell

latitude_9330_firmware

Vulnerable

h

dell

latitude_9330

-

o

dell

latitude_9520_firmware

Vulnerable

h

dell

latitude_9520

-

o

dell

latitude_rugged_5430_firmware

Vulnerable

h

dell

latitude_rugged_5430

-

o

dell

latitude_rugged_7330_firmware

Vulnerable

h

dell

latitude_rugged_7330

-

o

dell

optiplex_3000_firmware

Vulnerable

h

dell

optiplex_3000

-

o

dell

optiplex_3000_thin_client_firmware

Vulnerable

h

dell

optiplex_3000_thin_client

-

o

dell

optiplex_5000_firmware

Vulnerable

h

dell

optiplex_5000

-

o

dell

optiplex_5090_firmware

Vulnerable

h

dell

optiplex_5090

-

o

dell

optiplex_5400_all-in-one_firmware

Vulnerable

h

dell

optiplex_5400_all-in-one

-

o

dell

optiplex_5490_all-in-one_firmware

Vulnerable

h

dell

optiplex_5490_all-in-one

-

o

dell

optiplex_7000_firmware

Vulnerable

h

dell

optiplex_7000

-

o

dell

optiplex_7090_firmware

Vulnerable

h

dell

optiplex_7090

-

o

dell

optiplex_7400_all-in-one_firmware

Vulnerable

h

dell

optiplex_7400_all-in-one

-

o

dell

optiplex_7490_all-in-one_firmware

Vulnerable

h

dell

optiplex_7490_all-in-one

-

o

dell

optiplex_7410_all-in-one_firmware

Vulnerable

h

dell

optiplex_7410_all-in-one

-

o

dell

optiplex_micro_plus_7010_firmware

Vulnerable

h

dell

optiplex_micro_plus_7010

-

o

dell

optiplex_small_form_factor_plus_7010_firmware

Vulnerable

h

dell

optiplex_small_form_factor_plus_7010

-

o

dell

optiplex_tower_plus_7010_firmware

Vulnerable

h

dell

optiplex_tower_plus_7010

-

o

dell

optiplex_xe4_firmware

Vulnerable

h

dell

optiplex_xe4

-

o

dell

precision_3260_xe_compact_firmware

Vulnerable

h

dell

precision_3260_xe_compact

-

o

dell

precision_3260_compact_firmware

Vulnerable

h

dell

precision_3260_compact

-

o

dell

precision_3450_firmware

Vulnerable

h

dell

precision_3450

-

o

dell

precision_3460_xe_small_form_factor_firmware

Vulnerable

h

dell

precision_3460_xe_small_form_factor

-

o

dell

precision_3460_small_form_factor_firmware

Vulnerable

h

dell

precision_3460_small_form_factor

-

o

dell

precision_3470_firmware

Vulnerable

h

dell

precision_3470

-

o

dell

precision_3650_tower_firmware

Vulnerable

h

dell

precision_3650_tower

-

o

dell

precision_3660_firmware

Vulnerable

h

dell

precision_3660

-

o

dell

precision_5470_firmware

Vulnerable

h

dell

precision_5470

-

o

dell

precision_5570_firmware

Vulnerable

h

dell

precision_5570

-

o

dell

precision_5860_tower_firmware

Vulnerable

h

dell

precision_5860_tower

-

o

dell

precision_7960_tower_firmware

Vulnerable

h

dell

precision_7960_tower

-

o

dell

vostro_3020_sff_firmware

Vulnerable

h

dell

vostro_3020_sff

-

o

dell

vostro_3020_t_firmware

Vulnerable

h

dell

vostro_3020_t

-

o

dell

vostro_3510_firmware

Vulnerable

h

dell

vostro_3510

-

o

dell

vostro_3690_firmware

Vulnerable

h

dell

vostro_3690

-

o

dell

vostro_3710_firmware

Vulnerable

h

dell

vostro_3710

-

o

dell

vostro_3890_firmware

Vulnerable

h

dell

vostro_3890

-

o

dell

vostro_3910_firmware

Vulnerable

h

dell

vostro_3910

-

o

dell

vostro_5410_firmware

Vulnerable

h

dell

vostro_5410

-

o

dell

vostro_5491_firmware

Vulnerable

h

dell

vostro_5491

-

o

dell

vostro_5510_firmware

Vulnerable

h

dell

vostro_5510

-

o

dell

vostro_5591_firmware

Vulnerable

h

dell

vostro_5591

-

o

dell

vostro_5890_firmware

Vulnerable

h

dell

vostro_5890

-

o

dell

vostro_7500_firmware

Vulnerable

h

dell

vostro_7500

-

o

dell

vostro_7510_firmware

Vulnerable

h

dell

vostro_7510

-

o

dell

xps_13_9305_firmware

Vulnerable

h

dell

xps_13_9305

-

o

dell

xps_13_7390_firmware

Vulnerable

h

dell

xps_13_7390

-

o

dell

xps_13_7390_2-in-1_firmware

Vulnerable

h

dell

xps_13_7390_2-in-1

-

o

dell

xps_13_9300_firmware

Vulnerable

h

dell

xps_13_9300

-

o

dell

xps_13_9310_firmware

Vulnerable

h

dell

xps_13_9310

-

o

dell

xps_13_9310_2-in-1_firmware

Vulnerable

h

dell

xps_13_9310_2-in-1

-

o

dell

xps_13_9315_firmware

Vulnerable

h

dell

xps_13_9315

-

o

dell

xps_15_9520_firmware

Vulnerable

h

dell

xps_15_9520

-

References

https://www.dell.com/support/kbdoc/en-us/000215217/dsa-2023-190-dell-client-bios

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000215217/dsa-2023-190-dell-client-bios

Vendor Advisory

Weaknesses

[email protected]

Secondary
CWE-287

CVSS impact metrics

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L

4.6 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-16T18:15:09.560Z

2 years ago

Last modified

2024-11-21T07:03:22.940Z

1 year ago