Article Number: 000214779
DSA-2023-175: Dell Client BIOS Security Update for an Improper Input Validation Vulnerability
Summary: Dell Client BIOS remediation is available for an Improper Input Validation Vulnerability that could be exploited by malicious users to compromise the affected system.
Article Content
Impact
Medium
Details
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-32480 | Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability to perform arbitrary code execution. | 6.8 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-32480 | Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability to perform arbitrary code execution. | 6.8 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected Products and Remediation
| Product | BIOS Update Version | BIOS Release Date |
|---|---|---|
| Alienware m15 R6 | 1.24.0 | 9/6/2023 |
| Alienware m15 R7 | 1.17.0 | 05/29/2023 |
| ChengMing 3900/3901 | 1.13.0 | 06/13/2023 |
| ChengMing 3910/3911 | 1.5.1 | 07/07/2023 |
| Dell G15 5510 | 1.19.0 | 05/05/2023 |
| Dell G15 5511 | 1.23.0 | 9/6/2023 |
| Dell G15 5520 | 1.17.0 | 05/29/2023 |
| Inspiron 13 5320 | 1.11.1 | 06/12/2023 |
| Inspiron 14 5410/5418 | 2.19.1 | 06/09/2023 |
| Inspiron 14 5420 | 1.14.1 | 05/25/2023 |
| Inspiron 14 7420 2-in-1 | 1.12.1 | 06/12/2023 |
| Inspiron 14 Plus 7420 | 1.13.0 | 06/13/2023 |
| Inspiron 15 3511 | 1.22.1 | 06/13/2023 |
| Inspiron 15 5510/5518 | 2.19.1 | 06/09/2023 |
| Inspiron 16 7620 2-in-1 | 1.12.1 | 06/12/2023 |
| Inspiron 16 Plus 7620 | 1.13.0 | 06/13/2023 |
| Inspiron 24 5410 All-in-One Inspiron 24 5411 All-in-One |
1.13.0 | 07/10/2023 |
| Inspiron 27 7710 All-in-One | 1.13.0 | 07/10/2023 |
| Inspiron 3020 Small Desktop | 1.5.1 | 07/06/2023 |
| Inspiron 3020 Desktop | 1.5.1 | 07/06/2023 |
| Inspiron 3490 | 1.24.0 | 07/06/2023 |
| Inspiron 3511 | 1.22.1 | 06/13/2023 |
| Inspiron 3520 | 1.15.0 | 05/16/2023 |
| Inspiron 3891 | 1.19.0 | 08/09/2023 |
| Inspiron 3910 | 1.13.0 | 06/13/2023 |
| Inspiron 5310 | 2.20.1 | 06/13/2023 |
| Inspiron 5410 | 2.19.1 | 06/09/2023 |
| Inspiron 5620 | 1.14.1 | 05/25/2023 |
| Inspiron 7510 | 1.16.1 | 06/12/2023 |
| Inspiron 7610 | 1.16.1 | 06/12/2023 |
| Latitude 3120 | 1.17.2 | 06/16/2023 |
| Latitude 3320 | 1.22.2 | 06/12/2023 |
| Latitude 3330 | 1.13.0 | 06/12/2023 |
| Latitude 3420 | 1.29.0 | 06/09/2023 |
| Latitude 3430 | 1.10.1 | 06/12/2023 |
| Latitude 3520 | 1.29.0 | 06/09/2023 |
| Latitude 3530 | 1.10.1 | 06/12/2023 |
| Latitude 5320 | 1.28.1 | 06/13/2023 |
| Latitude 5330 | 1.13.1 | 06/13/2023 |
| Latitude 5420 | 1.29.0 | 07/13/2023 |
| Latitude 5430 | 1.13.1 | 06/19/2023 |
| Latitude 5431 | 1.14.0 | 07/18/2023 |
| Latitude 5520 | 1.28.1 | 06/13/2023 |
| Latitude 5521 | 1.22.1 | 06/19/2023 |
| Latitude 5530 | 1.13.2 | 06/13/2023 |
| Latitude 5531 | 1.14.1 | 06/13/2023 |
| Latitude 7320 | 1.27.0 | 07/19/2023 |
| Latitude 7320 Detachable | 1.23.0 | 07/19/2023 |
| Latitude 7330 | 1.14.1 | 06/16/2023 |
| Latitude 7420 | 1.27.0 | 07/19/2023 |
| Latitude 7430 | 1.14.1 | 06/16/2023 |
| Latitude 7520 | 1.27.0 | 07/19/2023 |
| Latitude 7530 | 1.14.1 | 06/16/2023 |
| Latitude 9330 | 1.12.1 | 07/17/2023 |
| Latitude 9420 | 1.22.0 | 07/07/2023 |
| Latitude 9430 | 1.15.0 | 07/17/2023 |
| Latitude 9520 | 1.23.0 | 07/17/2023 |
| Latitude Rugged 5430 | 1.18.1 | 06/13/2023 |
| Latitude Rugged 7330 | 1.18.1 | 06/13/2023 |
| Latitude 5421 | 1.22.0 | 07/12/2023 |
| OptiPlex 3000 Micro OptiPlex 3000 Small Form Factor OptiPlex 3000 Tower |
1.13.1 | 06/14/2023 |
| OptiPlex 3000 Thin Client | 1.10.0 | 07/11/2023 |
| OptiPlex 3090 Ultra | 1.21.0 | 07/11/2023 |
| OptiPlex 5000 Micro OptiPlex 5000 Small Form Factor Optiplex 5000 Tower |
1.13.1 | 06/14/2023 |
| OptiPlex 5090 Micro OptiPlex 5090 Small Form Factor OptiPlex 5090 Tower |
1.19.0 | 08/08/2023 |
| OptiPlex 5400 All-In-One | 1.1.28 | 06/14/2023 |
| OptiPlex 5490 All-In-One | 1.22.0 | 07/07/2023 |
| OptiPlex 7000 Micro OptiPlex 7000 Small Form Factor OptiPlex 7000 Tower OptiPlex 7000 XE Micro |
1.13.1 | 06/13/2023 |
| OptiPlex 7090 | 1.19.0 | 08/03/2023 |
| OptiPlex 7090 Ultra | 1.21.0 | 07/11/2023 |
| OptiPlex 7400 All-In-One | 1.1.28 | 06/14/2023 |
| OptiPlex 7490 All-In-One | 1.22.0 | 07/07/2023 |
| OptiPlex All-in-One 7410 | 1.4.1 | 06/13/2023 |
| OptiPlex Micro Plus 7010 | 1.5.1 | 07/11/2023 |
| OptiPlex Small Form Factor Plus 7010 | 1.5.1 | 07/11/2023 |
| OptiPlex Tower Plus 7010 | 1.5.1 | 07/11/2023 |
| OptiPlex XE4 OptiPlex XE4 OEM-Ready |
1.13.1 | 06/13/2023 |
| Precision 3450 | 1.19.0 | 08/07/2023 |
| Precision 3470 | 1.14.0 | 07/18/2023 |
| Precision 3560 | 1.28.1 | 06/13/2023 |
| Precision 3561 | 1.22.1 | 06/19/2023 |
| Precision 3570 | 1.13.2 | 06/13/2023 |
| Precision 3571 | 1.14.1 | 06/13/2023 |
| Precision 3650 Tower | 1.23.0 | 07/10/2023 |
| Precision 3660 | 2.6.1 | 07/11/2023 |
| Precision 5470 | 1.14.0 | 07/19/2023 |
| Precision 5570 | 1.15.0 | 07/18/2023 |
| Precision 5760 | 1.21.0 | 07/11/2023 |
| Precision 5770 | 1.17.1 | 06/10/2023 |
| Precision 7560 | 1.23.0 | 07/18/2023 |
| Precision 7670 | 1.13.0 | 07/18/2023 |
| Precision 7760 | 1.23.0 | 07/18/2023 |
| Precision 7770 | 1.13.0 | 07/18/2023 |
| Precision 7865 Tower | 1.1.0 | 07/11/2023 |
| Vostro 3020 SFF | 1.5.1 | 07/07/2023 |
| Vostro 3020 T | 1.5.1 | 07/07/2023 |
| Vostro 3420 | 1.15.0 | 05/16/2023 |
| Vostro 3510 | 1.22.1 | 06/13/2023 |
| Vostro 3510 | 1.22.1 | 06/13/2023 |
| Vostro 3520 | 1.15.0 | 05/16/2023 |
| Vostro 3590 | 1.24.0 | 07/06/2023 |
| Vostro 3690 | 1.19.0 | 08/08/2023 |
| Vostro 3890 | 1.19.0 | 08/08/2023 |
| Vostro 3910 | 1.13.0 | 06/13/2023 |
| Vostro 5310 | 2.20.1 | 06/13/2023 |
| Vostro 5320 | 1.11.1 | 06/12/2023 |
| Vostro 5410 | 2.19.1 | 06/09/2023 |
| Vostro 5510 | 2.19.1 | 06/09/2023 |
| Vostro 5620 | 1.14.1 | 05/25/2023 |
| Vostro 5890 | 1.19.0 | 08/03/2023 |
| Vostro 7510 | 1.16.1 | 06/12/2023 |
| Vostro 7620 | 1.13.0 | 06/13/2023 |
| XPS 13 9315 | 1.12.0 | 07/17/2023 |
| XPS 13 9315 2-in-1 | 1.8.1 | 06/10/2023 |
| XPS 13 Plus 9320 | 2.4.0 | 07/18/2023 |
| XPS 15 9510 | 1.22.0 | 8/16/2023 |
| XPS 15 9520 | 1.15.0 | 07/18/2023 |
| XPS 17 9710 | 1.21.0 | 07/11/2023 |
| XPS 17 9720 | 1.17.1 | 06/10/2023 |
| Product | BIOS Update Version | BIOS Release Date |
|---|---|---|
| Alienware m15 R6 | 1.24.0 | 9/6/2023 |
| Alienware m15 R7 | 1.17.0 | 05/29/2023 |
| ChengMing 3900/3901 | 1.13.0 | 06/13/2023 |
| ChengMing 3910/3911 | 1.5.1 | 07/07/2023 |
| Dell G15 5510 | 1.19.0 | 05/05/2023 |
| Dell G15 5511 | 1.23.0 | 9/6/2023 |
| Dell G15 5520 | 1.17.0 | 05/29/2023 |
| Inspiron 13 5320 | 1.11.1 | 06/12/2023 |
| Inspiron 14 5410/5418 | 2.19.1 | 06/09/2023 |
| Inspiron 14 5420 | 1.14.1 | 05/25/2023 |
| Inspiron 14 7420 2-in-1 | 1.12.1 | 06/12/2023 |
| Inspiron 14 Plus 7420 | 1.13.0 | 06/13/2023 |
| Inspiron 15 3511 | 1.22.1 | 06/13/2023 |
| Inspiron 15 5510/5518 | 2.19.1 | 06/09/2023 |
| Inspiron 16 7620 2-in-1 | 1.12.1 | 06/12/2023 |
| Inspiron 16 Plus 7620 | 1.13.0 | 06/13/2023 |
| Inspiron 24 5410 All-in-One Inspiron 24 5411 All-in-One |
1.13.0 | 07/10/2023 |
| Inspiron 27 7710 All-in-One | 1.13.0 | 07/10/2023 |
| Inspiron 3020 Small Desktop | 1.5.1 | 07/06/2023 |
| Inspiron 3020 Desktop | 1.5.1 | 07/06/2023 |
| Inspiron 3490 | 1.24.0 | 07/06/2023 |
| Inspiron 3511 | 1.22.1 | 06/13/2023 |
| Inspiron 3520 | 1.15.0 | 05/16/2023 |
| Inspiron 3891 | 1.19.0 | 08/09/2023 |
| Inspiron 3910 | 1.13.0 | 06/13/2023 |
| Inspiron 5310 | 2.20.1 | 06/13/2023 |
| Inspiron 5410 | 2.19.1 | 06/09/2023 |
| Inspiron 5620 | 1.14.1 | 05/25/2023 |
| Inspiron 7510 | 1.16.1 | 06/12/2023 |
| Inspiron 7610 | 1.16.1 | 06/12/2023 |
| Latitude 3120 | 1.17.2 | 06/16/2023 |
| Latitude 3320 | 1.22.2 | 06/12/2023 |
| Latitude 3330 | 1.13.0 | 06/12/2023 |
| Latitude 3420 | 1.29.0 | 06/09/2023 |
| Latitude 3430 | 1.10.1 | 06/12/2023 |
| Latitude 3520 | 1.29.0 | 06/09/2023 |
| Latitude 3530 | 1.10.1 | 06/12/2023 |
| Latitude 5320 | 1.28.1 | 06/13/2023 |
| Latitude 5330 | 1.13.1 | 06/13/2023 |
| Latitude 5420 | 1.29.0 | 07/13/2023 |
| Latitude 5430 | 1.13.1 | 06/19/2023 |
| Latitude 5431 | 1.14.0 | 07/18/2023 |
| Latitude 5520 | 1.28.1 | 06/13/2023 |
| Latitude 5521 | 1.22.1 | 06/19/2023 |
| Latitude 5530 | 1.13.2 | 06/13/2023 |
| Latitude 5531 | 1.14.1 | 06/13/2023 |
| Latitude 7320 | 1.27.0 | 07/19/2023 |
| Latitude 7320 Detachable | 1.23.0 | 07/19/2023 |
| Latitude 7330 | 1.14.1 | 06/16/2023 |
| Latitude 7420 | 1.27.0 | 07/19/2023 |
| Latitude 7430 | 1.14.1 | 06/16/2023 |
| Latitude 7520 | 1.27.0 | 07/19/2023 |
| Latitude 7530 | 1.14.1 | 06/16/2023 |
| Latitude 9330 | 1.12.1 | 07/17/2023 |
| Latitude 9420 | 1.22.0 | 07/07/2023 |
| Latitude 9430 | 1.15.0 | 07/17/2023 |
| Latitude 9520 | 1.23.0 | 07/17/2023 |
| Latitude Rugged 5430 | 1.18.1 | 06/13/2023 |
| Latitude Rugged 7330 | 1.18.1 | 06/13/2023 |
| Latitude 5421 | 1.22.0 | 07/12/2023 |
| OptiPlex 3000 Micro OptiPlex 3000 Small Form Factor OptiPlex 3000 Tower |
1.13.1 | 06/14/2023 |
| OptiPlex 3000 Thin Client | 1.10.0 | 07/11/2023 |
| OptiPlex 3090 Ultra | 1.21.0 | 07/11/2023 |
| OptiPlex 5000 Micro OptiPlex 5000 Small Form Factor Optiplex 5000 Tower |
1.13.1 | 06/14/2023 |
| OptiPlex 5090 Micro OptiPlex 5090 Small Form Factor OptiPlex 5090 Tower |
1.19.0 | 08/08/2023 |
| OptiPlex 5400 All-In-One | 1.1.28 | 06/14/2023 |
| OptiPlex 5490 All-In-One | 1.22.0 | 07/07/2023 |
| OptiPlex 7000 Micro OptiPlex 7000 Small Form Factor OptiPlex 7000 Tower OptiPlex 7000 XE Micro |
1.13.1 | 06/13/2023 |
| OptiPlex 7090 | 1.19.0 | 08/03/2023 |
| OptiPlex 7090 Ultra | 1.21.0 | 07/11/2023 |
| OptiPlex 7400 All-In-One | 1.1.28 | 06/14/2023 |
| OptiPlex 7490 All-In-One | 1.22.0 | 07/07/2023 |
| OptiPlex All-in-One 7410 | 1.4.1 | 06/13/2023 |
| OptiPlex Micro Plus 7010 | 1.5.1 | 07/11/2023 |
| OptiPlex Small Form Factor Plus 7010 | 1.5.1 | 07/11/2023 |
| OptiPlex Tower Plus 7010 | 1.5.1 | 07/11/2023 |
| OptiPlex XE4 OptiPlex XE4 OEM-Ready |
1.13.1 | 06/13/2023 |
| Precision 3450 | 1.19.0 | 08/07/2023 |
| Precision 3470 | 1.14.0 | 07/18/2023 |
| Precision 3560 | 1.28.1 | 06/13/2023 |
| Precision 3561 | 1.22.1 | 06/19/2023 |
| Precision 3570 | 1.13.2 | 06/13/2023 |
| Precision 3571 | 1.14.1 | 06/13/2023 |
| Precision 3650 Tower | 1.23.0 | 07/10/2023 |
| Precision 3660 | 2.6.1 | 07/11/2023 |
| Precision 5470 | 1.14.0 | 07/19/2023 |
| Precision 5570 | 1.15.0 | 07/18/2023 |
| Precision 5760 | 1.21.0 | 07/11/2023 |
| Precision 5770 | 1.17.1 | 06/10/2023 |
| Precision 7560 | 1.23.0 | 07/18/2023 |
| Precision 7670 | 1.13.0 | 07/18/2023 |
| Precision 7760 | 1.23.0 | 07/18/2023 |
| Precision 7770 | 1.13.0 | 07/18/2023 |
| Precision 7865 Tower | 1.1.0 | 07/11/2023 |
| Vostro 3020 SFF | 1.5.1 | 07/07/2023 |
| Vostro 3020 T | 1.5.1 | 07/07/2023 |
| Vostro 3420 | 1.15.0 | 05/16/2023 |
| Vostro 3510 | 1.22.1 | 06/13/2023 |
| Vostro 3510 | 1.22.1 | 06/13/2023 |
| Vostro 3520 | 1.15.0 | 05/16/2023 |
| Vostro 3590 | 1.24.0 | 07/06/2023 |
| Vostro 3690 | 1.19.0 | 08/08/2023 |
| Vostro 3890 | 1.19.0 | 08/08/2023 |
| Vostro 3910 | 1.13.0 | 06/13/2023 |
| Vostro 5310 | 2.20.1 | 06/13/2023 |
| Vostro 5320 | 1.11.1 | 06/12/2023 |
| Vostro 5410 | 2.19.1 | 06/09/2023 |
| Vostro 5510 | 2.19.1 | 06/09/2023 |
| Vostro 5620 | 1.14.1 | 05/25/2023 |
| Vostro 5890 | 1.19.0 | 08/03/2023 |
| Vostro 7510 | 1.16.1 | 06/12/2023 |
| Vostro 7620 | 1.13.0 | 06/13/2023 |
| XPS 13 9315 | 1.12.0 | 07/17/2023 |
| XPS 13 9315 2-in-1 | 1.8.1 | 06/10/2023 |
| XPS 13 Plus 9320 | 2.4.0 | 07/18/2023 |
| XPS 15 9510 | 1.22.0 | 8/16/2023 |
| XPS 15 9520 | 1.15.0 | 07/18/2023 |
| XPS 17 9710 | 1.21.0 | 07/11/2023 |
| XPS 17 9720 | 1.17.1 | 06/10/2023 |
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-06-13 | Initial Release |
| 2.0 | 2023-06-21 | Updated the CVE Identifier and Proprietary Code fields with the correct assigned CVE ID: CVE-2023-32480 |
| 2.1 | 2023-07-05 | Added CVSS Base Score into Table |
| 2.2 | 2023-07-14 | Updated Platform List |
| 2.3 | 2023-08-08 | Updated Platform List |
| 2.4 | 2023-09-12 | Final Platform List update |
Related Information
Legal Information
Article Properties
Affected Product
Alienware M15, Alienware m15 R7 AMD, Alienware m15 R7, Alienware m15, XPS 17, Dell G15 5510, Dell G15 5520, Inspiron 13 5320, Inspiron 3490, Inspiron 14 5410/5418, Inspiron 14 5420, Inspiron 14 7420 2-in-1, Inspiron 14 Plus 7420, Inspiron 15 3511
, Inspiron 3520 (End of Life), Inspiron 15 5510/5518, Inspiron 16 7620 2-in-1, Inspiron 16 Plus 7620, Inspiron 24 5410 All-in-One, Inspiron 27 7710 All-in-One, Inspiron 3020 Desktop, Inspiron 3020 Small Desktop, Inspiron 3891, Inspiron 3910, Latitude 3120, Latitude 3320, Latitude 3330, Latitude 5320, Latitude 5330, Latitude 7320, Latitude 7320 Detachable, Latitude 7330, Latitude 7330 Rugged Extreme, Latitude 9330, Latitude 3420, Latitude 3430, Latitude 5421, Latitude 5430 Rugged, Latitude 5431, Latitude 7420, Latitude 7430, Latitude 9420, Latitude 9430, Latitude 3520, Latitude 3530, Latitude 5520, Latitude 5521, Latitude 5530, Latitude 5531, Latitude 7520, Latitude 7530, Latitude 5420, Latitude 5430, OptiPlex 3000 Tower, OptiPlex 3000 Micro, OptiPlex 3000 Small Form Factor, OptiPlex 3000 Thin Client, OptiPlex 3090 Ultra, Optiplex 5000 Tower, OptiPlex 5000 Micro, OptiPlex 5000 Small Form Factor, OptiPlex 5400 All-In-One, OptiPlex 5490 All-In-One, OptiPlex 7000 Tower, OptiPlex 7000 Micro, OptiPlex 7000 Small Form Factor, OptiPlex Micro Plus 7010, OptiPlex Small Form Factor Plus 7010, OptiPlex Small Form Factor 7010, OptiPlex 7090 Tower, OptiPlex 7090 Ultra, OptiPlex 7400 All-In-One, OptiPlex All-In-One 7410, OptiPlex 7490 All-In-One, OptiPlex XE4, OptiPlex 7000 XE Micro, OptiPlex XE4 OEM-Ready, Precision 3470, Precision 5470, Precision 3560, Precision 3561, Precision 3570, Precision 3571, Precision 5570, Precision 7560, Precision 7670, Precision 5760, Precision 5770, Precision 7760, Precision 7770, Precision 3450 Small Form Factor, Precision 3650 Tower, Precision 3660 Tower, Precision 7865 Tower, Vostro 5320, Vostro 3420, Vostro 3520, Vostro 3590, Vostro 5620, Vostro 7620, Vostro 3020 Tower Desktop, Vostro 3020 Small Desktop, Vostro 3690, Vostro 3890, Vostro 3910, Vostro 5890, XPS 13 9315 2-in-1, XPS 13 9315, XPS 13 Plus 9320, XPS 15 9510, XPS 17 9710, XPS 17 9720
...
Last Published Date
12 Sep 2023
Article Type
Dell Security Advisory