CVE-2023-43078

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-08-28 · updated 2026-06-17
Weakness: CWE-59

Description

Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service.

Affected products

Dell Alienware M15 R6 Firmware: before 1.27.0 — fixed in 1.27.0
Dell Alienware M15 R7 Firmware: before 1.22.0 — fixed in 1.22.0
Dell Alienware M16 R1 Firmware: before 1.14.1 — fixed in 1.14.1
Dell Alienware M18 R1 Firmware: before 1.14.1 — fixed in 1.14.1
Dell Alienware X14 R2 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Alienware X16 R1 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Chengming 3900 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Chengming 3910 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Chengming 3911 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Chengming 3988 Firmware: before 1.20.0 — fixed in 1.20.0
Dell Chengming 3990 Firmware: before 1.24.0 — fixed in 1.24.0
Dell Chengming 3991 Firmware: before 1.24.0 — fixed in 1.24.0
Dell Dock Hd22Q Firmware Update Utility: 01.00.15
Dell Dock Wd19 Firmware Update Utility: 01.00.36
Dell Dock Wd22Tb4 Firmware Update Utility: 01.00.36
Dell G15 5510 Firmware: before 1.22.0 — fixed in 1.22.0
Dell G15 5511 Firmware: before 1.26.0 — fixed in 1.26.0
Dell G15 5520 Firmware: before 1.22.0 — fixed in 1.22.0
Dell G15 5530 Firmware: before 1.12.0 — fixed in 1.12.0
Dell G16 7620 Firmware: before 1.22.0 — fixed in 1.22.0
Dell G16 7630 Firmware: before 1.12.0 — fixed in 1.12.0
Dell G3 3500 Firmware: before 1.28.0 — fixed in 1.28.0
Dell G5 5000 Firmware: before 1.17.0 — fixed in 1.17.0
Dell G5 5090 Firmware: before 1.23.0 — fixed in 1.23.0
Dell G5 5500 Firmware: before 1.28.0 — fixed in 1.28.0
Dell G7 7500 Firmware: before 1.30.0 — fixed in 1.30.0
Dell G7 7700 Firmware: before 1.30.0 — fixed in 1.30.0
Dell Inspiron 13 5310 Firmware: before 2.25.0 — fixed in 2.25.0
Dell Inspiron 13 5320 Firmware: before 1.16.0 — fixed in 1.16.0
Dell Inspiron 13 5330 Firmware: before 1.12.1 — fixed in 1.12.1

How to fix

Upgrade to a fixed version: Dell Alienware M15 R6 Firmware 1.27.0; Dell Alienware M15 R7 Firmware 1.22.0; Dell Alienware M16 R1 Firmware 1.14.1; Dell Alienware M18 R1 Firmware 1.14.1; Dell Alienware X14 R2 Firmware 1.11.0; Dell Alienware X16 R1 Firmware 1.11.0; Dell Chengming 3900 Firmware 1.19.0; Dell Chengming 3910 Firmware 1.11.0; Dell Chengming 3911 Firmware 1.11.0; Dell Chengming 3988 Firmware 1.20.0; Dell Chengming 3990 Firmware 1.24.0; Dell Chengming 3991 Firmware 1.24.0. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/kbdoc/en-us/000217981/dsa-2023-362-security-update-for-dell-dock-firmware-and-dell-client-platform-for-an-improper-link-resolution-vulnerability

Get alerted when CVE-2023-43078 or the next vulnerability affects your stack