CVE-2023-32453

Severity: low (CVSS 3.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-16 · updated 2026-06-17
Weakness: CWE-287

Description

Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may potentially exploit this vulnerability in order to modify a security-critical UEFI variable without knowledge of the BIOS administrator.

Affected products

Dell Alienware M15 R7 Firmware: before 1.18.0 — fixed in 1.18.0
Dell Alienware M16 Firmware: before 1.10.1 — fixed in 1.10.1
Dell Alienware M18 Firmware: before 1.10.1 — fixed in 1.10.1
Dell Chengming 3900 Firmware: before 1.15.0 — fixed in 1.15.0
Dell Chengming 3901 Firmware: before 1.15.0 — fixed in 1.15.0
Dell Chengming 3910 Firmware: before 1.6.0 — fixed in 1.6.0
Dell Chengming 3911 Firmware: before 1.6.0 — fixed in 1.6.0
Dell G15 5520 Firmware: before 1.18.0 — fixed in 1.18.0
Dell G16 7620 Firmware: before 1.18.0 — fixed in 1.18.0
Dell G3 3500 Firmware: before 1.26.0 — fixed in 1.26.0
Dell G5 15 5500 Firmware: before 1.26.0 — fixed in 1.26.0
Dell G7 15 7500 Firmware: before 1.26.0 — fixed in 1.26.0
Dell G7 17 7700 Firmware: before 1.26.0 — fixed in 1.26.0
Dell Inspiron 14 5410 Firmware: before 2.20.0 — fixed in 2.20.0
Dell Inspiron 14 5418 Firmware: before 2.20.0 — fixed in 2.20.0
Dell Inspiron 15 3511 Firmware: before 1.23.0 — fixed in 1.23.0
Dell Inspiron 15 5510 Firmware: before 2.20.0 — fixed in 2.20.0
Dell Inspiron 15 5518 Firmware: before 2.20.0 — fixed in 2.20.0
Dell Inspiron 24 5420 All-In-One Firmware: before 1.4.0 — fixed in 1.4.0
Dell Inspiron 24 5421 All-In-One Firmware: before 1.4.0 — fixed in 1.4.0
Dell Inspiron 27 7720 All-In-One Firmware: before 1.4.0 — fixed in 1.4.0
Dell Inspiron 3020 Desktop Firmware: before 1.6.0 — fixed in 1.6.0
Dell Inspiron 3020 Small Desktop Firmware: through 1.6.0
Dell Inspiron 3493 Firmware: before 1.27.0 — fixed in 1.27.0
Dell Inspiron 3511 Firmware: before 1.23.0 — fixed in 1.23.0
Dell Inspiron 3593 Firmware: before 1.27.0 — fixed in 1.27.0
Dell Inspiron 3793 Firmware: before 1.27.0 — fixed in 1.27.0
Dell Inspiron 3891 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 3910 Firmware: before 1.15.0 — fixed in 1.15.0
Dell Inspiron 5410 Firmware: before 2.20.0 — fixed in 2.20.0

How to fix

Upgrade to a fixed version: Dell Alienware M15 R7 Firmware 1.18.0; Dell Alienware M16 Firmware 1.10.1; Dell Alienware M18 Firmware 1.10.1; Dell Chengming 3900 Firmware 1.15.0; Dell Chengming 3901 Firmware 1.15.0; Dell Chengming 3910 Firmware 1.6.0; Dell Chengming 3911 Firmware 1.6.0; Dell G15 5520 Firmware 1.18.0; Dell G16 7620 Firmware 1.18.0; Dell G3 3500 Firmware 1.26.0; Dell G5 15 5500 Firmware 1.26.0; Dell G7 15 7500 Firmware 1.26.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-32453 or the next vulnerability affects your stack