CVE-2023-32469

Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges could potentially exploit this vulnerability to perform arbitrary code execution.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dell:precision_5820_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_5820:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dell:precision_7820_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_7820:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dell:precision_7920_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_7920:-:*:*:*:*:*:*:*

History

29 Nov 2023, 19:49

Type Values Removed Values Added
References () https://www.dell.com/support/kbdoc/en-us/000216242/dsa-2023-223-security-update-for-a-dell-precision-tower-bios-vulnerability - () https://www.dell.com/support/kbdoc/en-us/000216242/dsa-2023-223-security-update-for-a-dell-precision-tower-bios-vulnerability - Vendor Advisory
CPE cpe:2.3:h:dell:precision_5820:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_7920:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_7820:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:precision_7820_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:precision_5820_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:precision_7920_firmware:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.7
CWE CWE-20
First Time Dell
Dell precision 7920
Dell precision 7820
Dell precision 7820 Firmware
Dell precision 7920 Firmware
Dell precision 5820 Firmware
Dell precision 5820

16 Nov 2023, 09:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-16 09:15

Updated : 2024-02-28 20:54


NVD link : CVE-2023-32469

Mitre link : CVE-2023-32469

CVE.ORG link : CVE-2023-32469


JSON object : View

Products Affected

dell

  • precision_5820
  • precision_7920_firmware
  • precision_7820
  • precision_5820_firmware
  • precision_7820_firmware
  • precision_7920
CWE
CWE-20

Improper Input Validation