What’s Vulnerable › Vulnerabilities

CVE-2023-28064

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-23 · updated 2026-06-17
• Weakness: CWE-787

Description

Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.

Affected products

• Dell Alienware M15 R6 Firmware: before 1.22.1 — fixed in 1.22.1
• Dell Alienware M15 R7 Firmware: before 1.17.0 — fixed in 1.17.0
• Dell Chengming 3900 Firmware: before 1.13.0 — fixed in 1.13.0
• Dell Chengming 3901 Firmware: before 1.13.0 — fixed in 1.13.0
• Dell G15 5510 Firmware: before 1.19.0 — fixed in 1.19.0
• Dell G15 5511 Firmware: before 1.22.1 — fixed in 1.22.1
• Dell G15 5520 Firmware: before 1.17.0 — fixed in 1.17.0
• Dell Inspiron 14 5410 Firmware: before 2.19.1 — fixed in 2.19.1
• Dell Inspiron 14 5418 Firmware: before 2.19.1 — fixed in 2.19.1
• Dell Inspiron 14 Plus 7420 Firmware: before 1.13.0 — fixed in 1.13.0
• Dell Inspiron 15 3511 Firmware: before 1.22.1 — fixed in 1.22.1
• Dell Inspiron 15 5510 Firmware: before 2.19.1 — fixed in 2.19.1
• Dell Inspiron 15 5518 Firmware: before 2.19.1 — fixed in 2.19.1
• Dell Inspiron 16 7620 2-In-1 Firmware: before 1.12.1 — fixed in 1.12.1
• Dell Inspiron 16 Plus 7620 Firmware: before 1.13.0 — fixed in 1.13.0
• Dell Inspiron 3511 Firmware: before 1.22.1 — fixed in 1.22.1
• Dell Inspiron 3520 Firmware: before 1.15.0 — fixed in 1.15.0
• Dell Inspiron 3891 Firmware: before 1.18.1 — fixed in 1.18.1
• Dell Inspiron 3910 Firmware: before 1.13.0 — fixed in 1.13.0
• Dell Inspiron 5310 Firmware: before 2.20.1 — fixed in 2.20.1
• Dell Inspiron 5320 Firmware: before 1.11.1 — fixed in 1.11.1
• Dell Inspiron 5410 Firmware: before 2.19.1 — fixed in 2.19.1
• Dell Inspiron 5420 Firmware: before 1.14.1 — fixed in 1.14.1
• Dell Inspiron 5620 Firmware: before 1.14.1 — fixed in 1.14.1
• Dell Inspiron 7420 Firmware: before 1.12.1 — fixed in 1.12.1
• Dell Inspiron 7510 Firmware: before 1.16.1 — fixed in 1.16.1
• Dell Inspiron 7610 Firmware: before 1.16.1 — fixed in 1.16.1
• Dell Latitude 3120 Firmware: before 1.17.2 — fixed in 1.17.2
• Dell Latitude 3320 Firmware: before 1.22.2 — fixed in 1.22.2
• Dell Latitude 3330 Firmware: before 1.13.0 — fixed in 1.13.0

How to fix

Upgrade to a fixed version: Dell Alienware M15 R6 Firmware 1.22.1; Dell Alienware M15 R7 Firmware 1.17.0; Dell Chengming 3900 Firmware 1.13.0; Dell Chengming 3901 Firmware 1.13.0; Dell G15 5510 Firmware 1.19.0; Dell G15 5511 Firmware 1.22.1; Dell G15 5520 Firmware 1.17.0; Dell Inspiron 14 5410 Firmware 2.19.1; Dell Inspiron 14 5418 Firmware 2.19.1; Dell Inspiron 14 Plus 7420 Firmware 1.13.0; Dell Inspiron 15 3511 Firmware 1.22.1; Dell Inspiron 15 5510 Firmware 2.19.1. Check the vendor advisory for mitigations.

References

• https://www.dell.com/support/kbdoc/en-us/000214778/dsa-2023-174-dell-client-bios-security-update-for-an-out-of-bounds-write-vulnerability
• https://www.dell.com/support/kbdoc/en-us/000214778/dsa-2023-174-dell-client-bios-security-update-for-an-out-of-bounds-write-vulnerability

Get alerted when CVE-2023-28064 or the next vulnerability affects your stack