CVE-2023-32469

Thursday, November 16, 2023

7.5

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Summary

Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges could potentially exploit this vulnerability to perform arbitrary code execution.

Affected Software

Vendor	Product	Version Range	Status
Dell	Dell Precision 5820 Tower, Dell Precision 7820 Tower, Dell Precision 7920 Tower	`Versions prior to 2.32.0`	affected
Dell	Dell Precision 5820 Tower, Dell Precision 7820 Tower, Dell Precision 7920 Tower	`Versions prior to 2.36.0`	affected

Weaknesses

CWE-20: CWE-20: Improper Input Validation

ADP Enrichment

CVE Program Container

Additional References

https://www.dell.com/support/kbdoc/en-us/000216242/dsa-2023-223-security-update-for-a-dell-precision-tower-bios-vulnerability

References

https://www.dell.com/support/kbdoc/en-us/000216242/dsa-2023-223-security-update-for-a-dell-precision-tower-bios-vulnerability

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.