CVE-2023-28073
First published: Fri Jun 23 2023(Updated: )
Dell BIOS contains an improper authentication vulnerability. A locally authenticated malicious user may potentially exploit this vulnerability by bypassing certain authentication mechanisms in order to elevate privileges on the system.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell Precision 3570 Firmware | <1.13.2 | |
| Dell Precision 3570 | ||
| Dell Latitude 5530 Firmware | <1.13.2 | |
| Dell Latitude 5530 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this Dell BIOS vulnerability?
The vulnerability ID for this Dell BIOS vulnerability is CVE-2023-28073.
What is the severity level of CVE-2023-28073?
The severity level of CVE-2023-28073 is high with a CVSS score of 7.8.
How can a locally authenticated malicious user exploit CVE-2023-28073?
A locally authenticated malicious user may potentially exploit CVE-2023-28073 by bypassing certain authentication mechanisms to elevate privileges on the system.
Which Dell products are affected by CVE-2023-28073?
Dell Precision 3570 Firmware (up to version 1.13.2) and Dell Latitude 5530 Firmware (up to version 1.13.2) are affected by CVE-2023-28073.
Where can I find more information about CVE-2023-28073?
You can find more information about CVE-2023-28073 on the Dell support page: https://www.dell.com/support/kbdoc/en-us/000213032/dsa-2023-160-dell-client
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/softwarecombine
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/dell
- canonical/dell precision 3570 firmware
- canonical/dell precision 3570
- canonical/dell latitude 5530 firmware
- canonical/dell latitude 5530