CVE-2023-32453: Medium severity dell alienware m15 r7 firmware vulnerability
Published Aug 16, 2023
·Updated
Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may potentially exploit this vulnerability in order to modify a security-critical UEFI variable without knowledge of the BIOS administrator.
Affected Software
222 affected components
Dell Alienware M15 R7 Firmware<1.18.0
Dell Alienware M15 R7
Dell Alienware M16 Firmware<1.10.1
Dell Alienware M16
Dell Alienware M18 Firmware<1.10.1
Dell Alienware M18
Dell Chengming 3900 Firmware<1.15.0
Dell Chengming 3900
Dell Chengming 3901 Firmware<1.15.0
Dell Chengming 3901
Dell Chengming 3910 Firmware<1.6.0
Dell Chengming 3910
Dell Chengming 3911 Firmware<1.6.0
Dell Chengming 3911
Dell G15 5520 Firmware<1.18.0
Dell G15 5520
Dell G16 7620 Firmware<1.18.0
Dell G16 7620
Dell G3 3500 Firmware<1.26.0
Dell G3 3500
Dell G5 15 5500 Firmware<1.26.0
Dell G5 15 5500
Dell G7 15 7500 Firmware<1.26.0
Dell G7 15 7500
Dell G7 17 7700 Firmware<1.26.0
Dell G7 17 7700
Dell Precision 5680 Firmware<1.4.1
Dell Precision 5680
Dell Inspiron 14 5410 Firmware<2.20.0
Dell Inspiron 14 5410
Dell Inspiron 14 5418 Firmware<2.20.0
Dell Inspiron 14 5418
Dell Inspiron 15 3511 Firmware<1.23.0
Dell Inspiron 15 3511
Dell Inspiron 15 5510 Firmware<2.20.0
Dell Inspiron 15 5510
Dell Inspiron 15 5518 Firmware<2.20.0
Dell Inspiron 15 5518
Dell Inspiron 24 5420 All-in-one Firmware<1.4.0
Dell Inspiron 24 5420 All-in-one
Dell Inspiron 24 5421 All-in-one Firmware<1.4.0
Dell Inspiron 24 5421 All-in-one
Dell Inspiron 27 7720 All-in-one Firmware<1.4.0
Dell Inspiron 27 7720 All-in-one
Dell Inspiron 3020 Small Desktop Firmware<=1.6.0
Dell Inspiron 3020 Small Desktop
Dell Inspiron 3020 Desktop Firmware<1.6.0
Dell Inspiron 3020 Desktop
Dell Inspiron 3493 Firmware<1.27.0
Dell Inspiron 3493
Dell Inspiron 3511 Firmware<1.23.0
Dell Inspiron 3511
Dell Inspiron 3593 Firmware<1.27.0
Dell Inspiron 3593
Dell Inspiron 3793 Firmware<1.27.0
Dell Inspiron 3793
Dell Inspiron 3891 Firmware<1.19.0
Dell Inspiron 3891
Dell Inspiron 3910 Firmware<1.15.0
Dell Inspiron 3910
Dell Inspiron 5410 Firmware<2.20.0
Dell Inspiron 5410
Dell Inspiron 5493 Firmware<1.27.0
Dell Inspiron 5493
Dell Inspiron 5593 Firmware<1.27.0
Dell Inspiron 5593
Dell Inspiron 7300 2-in-1 Firmware<1.19.0
Dell Inspiron 7300 2-in-1
Dell Inspiron 7490 Firmware<1.22.0
Dell Inspiron 7490
Dell Inspiron 7500 Firmware<1.24.0
Dell Inspiron 7500
Dell Inspiron 7500 2-in-1 Black Firmware<1.19.0
Dell Inspiron 7500 2-in-1 Black
Dell Inspiron 7501 Firmware<1.24.0
Dell Inspiron 7501
Dell Inspiron 7510 Firmware<1.17.0
Dell Inspiron 7510
Dell Inspiron 7610 Firmware<1.17.0
Dell Inspiron 7610
Dell Latitude 3140 Firmware<1.8.0
Dell Latitude 3140
Dell Latitude 3301 Firmware<1.27.0
Dell Latitude 3301
Dell Latitude 3320 Firmware<1.23.0
Dell Latitude 3320
Dell Latitude 3330 Firmware<1.15.0
Dell Latitude 3330
Dell Latitude 3340 Firmware<1.6.0
Dell Latitude 3340
Dell Latitude 3400 Firmware<1.29.0
Dell Latitude 3400
Dell Latitude 3430 Firmware<1.12.0
Dell Latitude 3430
Dell Latitude 3440 Firmware<1.6.0
Dell Latitude 3440
Dell Latitude 3500 Firmware<1.29.0
Dell Latitude 3500
Dell Latitude 3530 Firmware<1.12.0
Dell Latitude 3530
Dell Latitude 3540 Firmware<1.6.0
Dell Latitude 3540
Dell Latitude 5420 Firmware<1.30.0
Dell Latitude 5420
Dell Latitude 5430 Firmware<1.15.0
Dell Latitude 5430
Dell Latitude 5431 Firmware<1.15.0
Dell Latitude 5431
Dell Latitude 7230 Rugged Extreme Tablet Firmware<1.8.0
Dell Latitude 7230 Rugged Extreme Tablet
Dell Latitude 7320 Firmware<1.28.0
Dell Latitude 7320
Dell Latitude 7420 Firmware<1.28.0
Dell Latitude 7420
Dell Latitude 7520 Firmware<1.28.0
Dell Latitude 7520
Dell Latitude 9330 Firmware<1.13.0
Dell Latitude 9330
Dell Latitude 9520 Firmware<1.24.0
Dell Latitude 9520
Dell Latitude Rugged 5430 Firmware<1.20.0
Dell Latitude Rugged 5430
Dell Latitude Rugged 7330 Firmware<1.20.0
Dell Latitude Rugged 7330
Dell Optiplex 3000 Firmware<1.15.0
Dell Optiplex 3000
Dell Optiplex 3000 Thin Client Firmware<1.11.0
Dell Optiplex 3000 Thin Client
Dell Optiplex 5000 Firmware<1.15.0
Dell Optiplex 5000
Dell Optiplex 5090 Firmware<1.19.0
Dell Optiplex 5090
Dell Optiplex 5400 All-in-one Firmware<1.1.30
Dell Optiplex 5400 All-in-one
Dell Optiplex 5490 All-in-one Firmware<1.23.0
Dell Optiplex 5490 All-in-one
Dell Optiplex 7000 Firmware<1.15.0
Dell Optiplex 7000
Dell Optiplex 7090 Firmware<1.19.0
Dell Optiplex 7090
Dell Optiplex 7400 All-in-one Firmware<1.1.30
Dell Optiplex 7400 All-in-one
Dell Optiplex 7490 All-in-one Firmware<1.23.0
Dell Optiplex 7490 All-in-one
Dell Optiplex 7410 All-in-one Firmware<1.6.0
Dell Optiplex 7410 All-in-one
Dell Optiplex Micro Plus 7010 Firmware<1.6.0
Dell Optiplex Micro Plus 7010
Dell Optiplex Small Form Factor Plus 7010 Firmware<1.6.0
Dell Optiplex Small Form Factor Plus 7010
Dell Optiplex Tower Plus 7010 Firmware<1.6.0
Dell Optiplex Tower Plus 7010
Dell Optiplex Xe4 Firmware<1.15.0
Dell Optiplex Xe4
Dell Precision 3260 Xe Compact Firmware<2.7.0
Dell Precision 3260 Xe Compact
Dell Precision 3260 Compact Firmware<2.7.0
Dell Precision 3260 Compact
Dell Precision 3450 Firmware<1.19.0
Dell Precision 3450
Dell Precision 3460 Xe Small Form Factor Firmware<2.7.0
Dell Precision 3460 Xe Small Form Factor
Dell Precision 3460 Small Form Factor Firmware<2.7.0
Dell Precision 3460 Small Form Factor
Dell Precision 3470 Firmware<1.15.0
Dell Precision 3470
Dell Precision 3650 Tower Firmware<1.24.0
Dell Precision 3650 Tower
Dell Precision 3660 Firmware<2.7.0
Dell Precision 3660
Dell Precision 5470 Firmware<1.15.0
Dell Precision 5470
Dell Precision 5570 Firmware<1.16.0
Dell Precision 5570
Dell Precision 5860 Tower Firmware<1.0.10
Dell Precision 5860 Tower
Dell Precision 7960 Tower Firmware<1.0.9
Dell Precision 7960 Tower
Dell Vostro 3020 Sff Firmware<1.6.0
Dell Vostro 3020 Sff
Dell Vostro 3020 T Firmware<1.6.0
Dell Vostro 3020 T
Dell Vostro 3510 Firmware<1.23.0
Dell Vostro 3510
Dell Vostro 3690 Firmware<1.19.0
Dell Vostro 3690
Dell Vostro 3710 Firmware<1.15.0
Dell Vostro 3710
Dell Vostro 3890 Firmware<1.19.0
Dell Vostro 3890
Dell Vostro 3910 Firmware<1.15.0
Dell Vostro 3910
Dell Vostro 5410 Firmware<2.20.0
Dell Vostro 5410
Dell Vostro 5491 Firmware<1.27.0
Dell Vostro 5491
Dell Vostro 5510 Firmware<2.20.0
Dell Vostro 5510
Dell Vostro 5591 Firmware<1.27.0
Dell Vostro 5591
Dell Vostro 5890 Firmware<1.19.0
Dell Vostro 5890
Dell Vostro 7500 Firmware<1.24.0
Dell Vostro 7500
Dell Vostro 7510 Firmware<1.17.0
Dell Vostro 7510
Dell Xps 13 9305 Firmware<1.16.0
Dell Xps 13 9305
Dell Xps 13 7390 Firmware<1.21.0
Dell Xps 13 7390
Dell Xps 13 7390 2-in-1 Firmware<1.26.0
Dell Xps 13 7390 2-in-1
Dell Xps 13 9300 Firmware<1.19.0
Dell Xps 13 9300
Dell Xps 13 9310 Firmware<3.17.0
Dell Xps 13 9310
Dell Xps 13 9310 2-in-1 Firmware<2.19.0
Dell Xps 13 9310 2-in-1
Dell Xps 13 9315 Firmware<1.13.0
Dell Xps 13 9315
Dell Xps 15 9520 Firmware<1.16.0
Dell Xps 15 9520
Event History
Aug 16, 2023
CVE Published
via MITRE·07:22 PM
Data Sourced
via MITRE·07:22 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-32453?
The severity of CVE-2023-32453 is categorized as high due to the potential for unauthorized modification of critical security settings by an attacker with physical access.
2
How do I fix CVE-2023-32453?
To fix CVE-2023-32453, update the BIOS firmware to the latest version provided by Dell as specified in their security advisory.
3
What systems are affected by CVE-2023-32453?
Affected systems include specific Dell Alienware, Chengming, G series, Inspiron, Latitude, and OptiPlex firmware versions prior to the given update thresholds.
4
Can the CVE-2023-32453 vulnerability be exploited remotely?
No, CVE-2023-32453 requires physical access to the system for exploitation, making it a local vulnerability.
5
What are the potential risks associated with CVE-2023-32453?
The risks associated with CVE-2023-32453 include unauthorized changes to UEFI variables, potentially leading to system compromise and instability.