CVE-2023-39251

Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dell:inspiron_7510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7510:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dell:inspiron_7610_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7610:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dell:latitude_5430_rugged_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5430_rugged:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:dell:latitude_5521_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5521:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:dell:latitude_7330_rugged_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_7330_rugged:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:dell:precision_3561_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_3561:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:dell:precision_5560_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_5560:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:dell:precision_5760_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_5760:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:dell:precision_7560_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_7560:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:dell:precision_7760_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_7760:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:dell:vostro_7510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_7510:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:dell:xps_15_9510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_15_9510:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:dell:xps_17_9710_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_17_9710:-:*:*:*:*:*:*:*

History

04 Jan 2024, 14:53

Type Values Removed Values Added
CPE cpe:2.3:h:dell:latitude_5430_rugged:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:latitude_7330_rugged_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:precision_7560_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_3561:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:precision_7760_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7510:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:latitude_5430_rugged_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:latitude_5521_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_7330_rugged:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_7560:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_7510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:precision_3561_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:precision_5760_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_17_9710:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_7610_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_7510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_5760:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:precision_5560_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_7760:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_15_9510:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:xps_17_9710_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_7510:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7610:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:xps_15_9510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_5521:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_5560:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.7
First Time Dell precision 7560 Firmware
Dell latitude 5430 Rugged Firmware
Dell xps 17 9710 Firmware
Dell latitude 5521 Firmware
Dell latitude 7330 Rugged
Dell
Dell precision 5560 Firmware
Dell vostro 7510 Firmware
Dell inspiron 7510
Dell precision 5760 Firmware
Dell vostro 7510
Dell precision 5560
Dell inspiron 7610
Dell inspiron 7610 Firmware
Dell xps 15 9510 Firmware
Dell precision 3561
Dell precision 7560
Dell precision 3561 Firmware
Dell precision 5760
Dell latitude 5521
Dell latitude 7330 Rugged Firmware
Dell xps 15 9510
Dell precision 7760 Firmware
Dell xps 17 9710
Dell latitude 5430 Rugged
Dell precision 7760
Dell inspiron 7510 Firmware
References () https://www.dell.com/support/kbdoc/en-us/000217707/dsa-2023-342 - () https://www.dell.com/support/kbdoc/en-us/000217707/dsa-2023-342 - Vendor Advisory
CWE NVD-CWE-noinfo

22 Dec 2023, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-12-22 18:15

Updated : 2024-02-20 18:50


NVD link : CVE-2023-39251

Mitre link : CVE-2023-39251


JSON object : View

Products Affected

dell

  • precision_7560_firmware
  • latitude_7330_rugged_firmware
  • precision_3561
  • precision_5760
  • xps_17_9710_firmware
  • xps_15_9510
  • latitude_5430_rugged_firmware
  • latitude_5521_firmware
  • precision_5560
  • xps_15_9510_firmware
  • inspiron_7510
  • latitude_7330_rugged
  • inspiron_7510_firmware
  • inspiron_7610
  • precision_7560
  • latitude_5521
  • vostro_7510
  • xps_17_9710
  • latitude_5430_rugged
  • precision_7760_firmware
  • precision_5560_firmware
  • inspiron_7610_firmware
  • vostro_7510_firmware
  • precision_3561_firmware
  • precision_5760_firmware
  • precision_7760