Improper Input Validation Vulnerability in Dell BIOS
CVE-2023-28031

5.1MEDIUM

Key Information:

Vendor
Dell
Status
Cpg BiOS
Vendor
CVE Published:
23 June 2023

Summary

An improper input validation vulnerability exists in Dell BIOS, allowing local authenticated users with administrator privileges to exploit this flaw. By manipulating UEFI variables, an attacker may change configurations that could compromise system integrity or introduce instability. Organizations are advised to review and apply the latest security updates to ensure their systems remain secure.

Affected Version(s)

CPG BIOS All Versions

References

https://www.dell.com/support/kbdoc/en-us/000212204/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.