CVE-2023-28073

Dell BIOS contains an improper authentication vulnerability. A locally authenticated malicious user may potentially exploit this vulnerability by bypassing certain authentication mechanisms in order to elevate privileges on the system.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dell:precision_3570_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_3570:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dell:latitude_5530_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5530:-:*:*:*:*:*:*:*

History

21 Nov 2024, 07:54

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.8
v2 : unknown
v3 : 8.2
References () https://www.dell.com/support/kbdoc/en-us/000213032/dsa-2023-160-dell-client - Vendor Advisory () https://www.dell.com/support/kbdoc/en-us/000213032/dsa-2023-160-dell-client - Vendor Advisory

30 Jun 2023, 21:17

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
References (MISC) https://www.dell.com/support/kbdoc/en-us/000213032/dsa-2023-160-dell-client - (MISC) https://www.dell.com/support/kbdoc/en-us/000213032/dsa-2023-160-dell-client - Vendor Advisory
First Time Dell latitude 5530 Firmware
Dell precision 3570
Dell latitude 5530
Dell precision 3570 Firmware
Dell
CPE cpe:2.3:o:dell:latitude_5530_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:precision_3570_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5530:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_3570:-:*:*:*:*:*:*:*

23 Jun 2023, 11:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-06-23 11:15

Updated : 2024-11-21 07:54


NVD link : CVE-2023-28073

Mitre link : CVE-2023-28073

CVE.ORG link : CVE-2023-28073


JSON object : View

Products Affected

dell

  • precision_3570_firmware
  • latitude_5530
  • latitude_5530_firmware
  • precision_3570
CWE
CWE-287

Improper Authentication