What’s Vulnerable › Vulnerabilities
CVE-2023-28063
- Severity: medium (CVSS 4.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-02-06 · updated 2026-06-17
- Weakness: CWE-195
Description
Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.
Affected products
- Dell Alienware M15 R6 Firmware: all versions
- Dell Alienware M15 R7 Firmware: all versions
- Dell Chengming 3900 Firmware: all versions
- Dell Chengming 3901 Firmware: all versions
- Dell Chengming 3910 Firmware: all versions
- Dell Chengming 3911 Firmware: all versions
- Dell Chengming 3990 Firmware: all versions
- Dell Chengming 3991 Firmware: all versions
- Dell G15 5510 Firmware: all versions
- Dell G15 5511 Firmware: all versions
- Dell G15 5520 Firmware: all versions
- Dell G3 3500 Firmware: all versions
- Dell G5 15 5590 Firmware: all versions
- Dell G5 5000 Firmware: all versions
- Dell G7 15 7500 Firmware: all versions
- Dell G7 15 7590 Firmware: all versions
- Dell G7 17 7700 Firmware: all versions
- Dell G7 17 7790 Firmware: all versions
- Dell Inspiron 13 5320 Firmware: all versions
- Dell Inspiron 14 5410 Firmware: all versions
- Dell Inspiron 14 5418 Firmware: all versions
- Dell Inspiron 14 5420 Firmware: all versions
- Dell Inspiron 14 7420 2-In-1 Firmware: all versions
- Dell Inspiron 14 Plus 7420 Firmware: all versions
- Dell Inspiron 15 3511 Firmware: all versions
- Dell Inspiron 15 5510 Firmware: all versions
- Dell Inspiron 15 5518 Firmware: all versions
- Dell Inspiron 16 7620 2-In-1 Firmware: all versions
- Dell Inspiron 16 Plus 7620 Firmware: all versions
- Dell Inspiron 24 5410 All-In-One Firmware: all versions
References
- https://www.dell.com/support/kbdoc/en-us/000214780/dsa-2023-176-dell-client-bios-security-update-for-a-signed-to-unsigned-conversion-error-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000214780/dsa-2023-176-dell-client-bios-security-update-for-a-signed-to-unsigned-conversion-error-vulnerability
Get alerted when CVE-2023-28063 or the next vulnerability affects your stack