CVE-2023-32475

Severity: high (CVSS 7.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-06-07 · updated 2026-06-17
Weakness: CWE-353

Description

Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.

Affected products

Dell Alienware Aurora R10 Firmware: before 2.6.0 — fixed in 2.6.0
Dell Alienware Aurora R15 Amd Firmware: before 1.13.0 — fixed in 1.13.0
Dell Alienware Aurora Ryzen Edition R14 Firmware: before 2.16.0 — fixed in 2.16.0
Dell Alienware M15 R7 Amd Firmware: before 1.15.0 — fixed in 1.15.0
Dell Alienware M15 Ryzen Edition R5 Firmware: before 1.16.0 — fixed in 1.16.0
Dell Alienware M16 R1 Amd Firmware: before 1.9.0 — fixed in 1.9.0
Dell Alienware M17 R5 Amd Firmware: before 1.15.0 — fixed in 1.15.0
Dell Alienware M18 Firmware: before 1.9.0 — fixed in 1.9.0
Dell G15 5515 Firmware: before 1.15.0 — fixed in 1.15.0
Dell G15 5525 Firmware: before 1.15.0 — fixed in 1.15.0
Dell G15 5535 Firmware: before 1.5.0 — fixed in 1.5.0
Dell G5 5505 Firmware: before 1.18.0 — fixed in 1.18.0
Dell Inspiron 14 5425 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Inspiron 14 5435 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Inspiron 14 7425 2-In-1 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Inspiron 14 7435 2-In-1 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Inspiron 15 3515 Firmware: before 1.16.0 — fixed in 1.16.0
Dell Inspiron 15 3525 Firmware: before 1.15.1 — fixed in 1.15.1
Dell Inspiron 15 3535 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Inspiron 16 5625 Firmware: before 1.13.0 — fixed in 1.13.0
Dell Inspiron 16 5635 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Inspiron 16 7635 2-In-1 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Inspiron 24 5415 All-In-One Firmware: before 1.17.0 — fixed in 1.17.0
Dell Inspiron 3505 Firmware: before 1.16.0 — fixed in 1.16.0
Dell Inspiron 5405 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Inspiron 5415 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 5505 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Inspiron 5515 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Inspiron 7405 2-In-1 Firmware: before 1.15.0 — fixed in 1.15.0
Dell Inspiron 7415 2-In-1 Firmware: before 1.19.0 — fixed in 1.19.0

How to fix

Upgrade to a fixed version: Dell Alienware Aurora R10 Firmware 2.6.0; Dell Alienware Aurora R15 Amd Firmware 1.13.0; Dell Alienware Aurora Ryzen Edition R14 Firmware 2.16.0; Dell Alienware M15 R7 Amd Firmware 1.15.0; Dell Alienware M15 Ryzen Edition R5 Firmware 1.16.0; Dell Alienware M16 R1 Amd Firmware 1.9.0; Dell Alienware M17 R5 Amd Firmware 1.15.0; Dell Alienware M18 Firmware 1.9.0; Dell G15 5515 Firmware 1.15.0; Dell G15 5525 Firmware 1.15.0; Dell G15 5535 Firmware 1.5.0; Dell G5 5505 Firmware 1.18.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-32475 or the next vulnerability affects your stack