Out-of-bounds write in Dell CPG BIOS
Priority LOW 21CWE-787Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.
Summary
Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00264 18th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dell | CPG BIOS | All Versions | — | No fix listed | CNA |
- CPG BIOS VendorDell Affected All Versions Fixed in — No fix listed CNA
CPE configurations NVD · 140
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:alienware_m15_r6_firmware:*:*:*:*:*:*:*:* | before 1.22.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_m15_r6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:alienware_m15_r7_firmware:*:*:*:*:*:*:*:* | before 1.17.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:alienware_m15_r7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:chengming_3900_firmware:*:*:*:*:*:*:*:* | before 1.13.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:chengming_3900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:chengming_3901_firmware:*:*:*:*:*:*:*:* | before 1.13.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:chengming_3901:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:g15_5510_firmware:*:*:*:*:*:*:*:* | before 1.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:g15_5510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:alienware_m15_r6_firmware:*:*:*:*:*:*:*:* Versions before 1.22.1 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_m15_r6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:alienware_m15_r7_firmware:*:*:*:*:*:*:*:* Versions before 1.17.0 Vulnerable ·Dell
- cpe:2.3:h:dell:alienware_m15_r7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:chengming_3900_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
- cpe:2.3:h:dell:chengming_3900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:chengming_3901_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
- cpe:2.3:h:dell:chengming_3901:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:g15_5510_firmware:*:*:*:*:*:*:*:* Versions before 1.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:g15_5510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Show 130 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:g15_5511_firmware:*:*:*:*:*:*:*:* | before 1.22.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:g15_5511:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:g15_5520_firmware:*:*:*:*:*:*:*:* | before 1.17.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:g15_5520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_14_5418_firmware:*:*:*:*:*:*:*:* | before 2.19.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_14_5418:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_14_5410_firmware:*:*:*:*:*:*:*:* | before 2.19.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_14_5410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_14_plus_7420_firmware:*:*:*:*:*:*:*:* | before 1.13.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_14_plus_7420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_15_3511_firmware:*:*:*:*:*:*:*:* | before 1.22.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_15_3511:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_15_5510_firmware:*:*:*:*:*:*:*:* | before 2.19.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_15_5510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_15_5518_firmware:*:*:*:*:*:*:*:* | before 2.19.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_15_5518:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_16_7620_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.12.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_16_7620_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_16_plus_7620_firmware:*:*:*:*:*:*:*:* | before 1.13.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_16_plus_7620:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_3511_firmware:*:*:*:*:*:*:*:* | before 1.22.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3511:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_3520_firmware:*:*:*:*:*:*:*:* | before 1.15.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_3891_firmware:*:*:*:*:*:*:*:* | before 1.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3891:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_3910_firmware:*:*:*:*:*:*:*:* | before 1.13.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3910:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_5310_firmware:*:*:*:*:*:*:*:* | before 2.20.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_5310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_5320_firmware:*:*:*:*:*:*:*:* | before 1.11.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_5320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_5410_firmware:*:*:*:*:*:*:*:* | before 2.19.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_5410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_5420_firmware:*:*:*:*:*:*:*:* | before 1.14.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_5420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_5620_firmware:*:*:*:*:*:*:*:* | before 1.14.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_5620:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_7420_firmware:*:*:*:*:*:*:*:* | before 1.12.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_7420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_7510_firmware:*:*:*:*:*:*:*:* | before 1.16.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_7510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_7610_firmware:*:*:*:*:*:*:*:* | before 1.16.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_7610:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3120_firmware:*:*:*:*:*:*:*:* | before 1.17.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3320_firmware:*:*:*:*:*:*:*:* | before 1.22.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3330_firmware:*:*:*:*:*:*:*:* | before 1.13.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3330:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3420_firmware:*:*:*:*:*:*:*:* | before 1.29.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3430_firmware:*:*:*:*:*:*:*:* | before 1.10.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3430:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3520_firmware:*:*:*:*:*:*:*:* | before 1.29.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3530_firmware:*:*:*:*:*:*:*:* | before 1.10.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5320_firmware:*:*:*:*:*:*:*:* | before 1.28.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5330_firmware:*:*:*:*:*:*:*:* | before 1.13.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5330:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5520_firmware:*:*:*:*:*:*:*:* | before 1.28.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5530_firmware:*:*:*:*:*:*:*:* | before 1.13.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5531_firmware:*:*:*:*:*:*:*:* | before 1.14.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5531:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7330_firmware:*:*:*:*:*:*:*:* | before 1.14.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7330:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7430_firmware:*:*:*:*:*:*:*:* | before 1.14.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7430:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7530_firmware:*:*:*:*:*:*:*:* | before 1.14.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_rugged_5430_firmware:*:*:*:*:*:*:*:* | before 1.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_rugged_5430:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_rugged_7330_firmware:*:*:*:*:*:*:*:* | before 1.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_rugged_7330:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_3000_firmware:*:*:*:*:*:*:*:* | before 1.13.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_5000_firmware:*:*:*:*:*:*:*:* | before 1.13.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_5400_firmware:*:*:*:*:*:*:*:* | before 1.1.28 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_5400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_7000_firmware:*:*:*:*:*:*:*:* | before 1.13.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_7000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_7000_oem_firmware:*:*:*:*:*:*:*:* | before 1.13.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_7000_oem:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_7400_firmware:*:*:*:*:*:*:*:* | before 1.1.28 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_7400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_7410_all-in-one_firmware:*:*:*:*:*:*:*:* | before 1.4.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_7410_all-in-one:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3560_firmware:*:*:*:*:*:*:*:* | before 1.28.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3560:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3570_firmware:*:*:*:*:*:*:*:* | before 1.13.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3570:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3571_firmware:*:*:*:*:*:*:*:* | before 1.14.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3571:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_5760_firmware:*:*:*:*:*:*:*:* | before 1.20.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_5760:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_5770_firmware:*:*:*:*:*:*:*:* | before 1.17.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_5770:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3420_firmware:*:*:*:*:*:*:*:* | before 1.15.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3510_firmware:*:*:*:*:*:*:*:* | before 1.22.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3520_firmware:*:*:*:*:*:*:*:* | before 1.15.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3910_firmware:*:*:*:*:*:*:*:* | before 1.13.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3910:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_5310_firmware:*:*:*:*:*:*:*:* | before 2.20.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_5310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_5320_firmware:*:*:*:*:*:*:*:* | before 1.11.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_5320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_5410_firmware:*:*:*:*:*:*:*:* | before 2.19.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_5410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_5510_firmware:*:*:*:*:*:*:*:* | before 2.19.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_5510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_5620_firmware:*:*:*:*:*:*:*:* | before 1.14.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_5620:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_7510_firmware:*:*:*:*:*:*:*:* | before 1.16.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_7510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_7620_firmware:*:*:*:*:*:*:*:* | before 1.13.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_7620:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:xps_13_9315_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.8.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:xps_13_9315_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:xps_17_9710_firmware:*:*:*:*:*:*:*:* | before 1.20.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:xps_17_9710:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:xps_17_9720_firmware:*:*:*:*:*:*:*:* | before 1.17.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:xps_17_9720:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:g15_5511_firmware:*:*:*:*:*:*:*:* Versions before 1.22.1 Vulnerable ·Dell
- cpe:2.3:h:dell:g15_5511:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:g15_5520_firmware:*:*:*:*:*:*:*:* Versions before 1.17.0 Vulnerable ·Dell
- cpe:2.3:h:dell:g15_5520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_14_5418_firmware:*:*:*:*:*:*:*:* Versions before 2.19.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_14_5418:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_14_5410_firmware:*:*:*:*:*:*:*:* Versions before 2.19.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_14_5410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_14_plus_7420_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_14_plus_7420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_15_3511_firmware:*:*:*:*:*:*:*:* Versions before 1.22.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_15_3511:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_15_5510_firmware:*:*:*:*:*:*:*:* Versions before 2.19.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_15_5510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_15_5518_firmware:*:*:*:*:*:*:*:* Versions before 2.19.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_15_5518:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_16_7620_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.12.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_16_7620_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_16_plus_7620_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_16_plus_7620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_3511_firmware:*:*:*:*:*:*:*:* Versions before 1.22.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3511:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_3520_firmware:*:*:*:*:*:*:*:* Versions before 1.15.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_3891_firmware:*:*:*:*:*:*:*:* Versions before 1.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3891:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_3910_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3910:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_5310_firmware:*:*:*:*:*:*:*:* Versions before 2.20.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_5310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_5320_firmware:*:*:*:*:*:*:*:* Versions before 1.11.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_5320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_5410_firmware:*:*:*:*:*:*:*:* Versions before 2.19.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_5410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_5420_firmware:*:*:*:*:*:*:*:* Versions before 1.14.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_5420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_5620_firmware:*:*:*:*:*:*:*:* Versions before 1.14.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_5620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_7420_firmware:*:*:*:*:*:*:*:* Versions before 1.12.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_7420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_7510_firmware:*:*:*:*:*:*:*:* Versions before 1.16.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_7510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_7610_firmware:*:*:*:*:*:*:*:* Versions before 1.16.1 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_7610:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3120_firmware:*:*:*:*:*:*:*:* Versions before 1.17.2 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3320_firmware:*:*:*:*:*:*:*:* Versions before 1.22.2 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3330_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3420_firmware:*:*:*:*:*:*:*:* Versions before 1.29.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3430_firmware:*:*:*:*:*:*:*:* Versions before 1.10.1 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3520_firmware:*:*:*:*:*:*:*:* Versions before 1.29.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3530_firmware:*:*:*:*:*:*:*:* Versions before 1.10.1 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5320_firmware:*:*:*:*:*:*:*:* Versions before 1.28.1 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5330_firmware:*:*:*:*:*:*:*:* Versions before 1.13.1 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5520_firmware:*:*:*:*:*:*:*:* Versions before 1.28.1 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5530_firmware:*:*:*:*:*:*:*:* Versions before 1.13.2 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5531_firmware:*:*:*:*:*:*:*:* Versions before 1.14.1 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5531:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7330_firmware:*:*:*:*:*:*:*:* Versions before 1.14.1 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7430_firmware:*:*:*:*:*:*:*:* Versions before 1.14.1 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7530_firmware:*:*:*:*:*:*:*:* Versions before 1.14.1 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_rugged_5430_firmware:*:*:*:*:*:*:*:* Versions before 1.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_rugged_5430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_rugged_7330_firmware:*:*:*:*:*:*:*:* Versions before 1.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_rugged_7330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_3000_firmware:*:*:*:*:*:*:*:* Versions before 1.13.1 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_5000_firmware:*:*:*:*:*:*:*:* Versions before 1.13.1 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_5400_firmware:*:*:*:*:*:*:*:* Versions before 1.1.28 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_5400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_7000_firmware:*:*:*:*:*:*:*:* Versions before 1.13.1 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_7000_oem_firmware:*:*:*:*:*:*:*:* Versions before 1.13.1 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_7000_oem:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_7400_firmware:*:*:*:*:*:*:*:* Versions before 1.1.28 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_7400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_7410_all-in-one_firmware:*:*:*:*:*:*:*:* Versions before 1.4.1 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_7410_all-in-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3560_firmware:*:*:*:*:*:*:*:* Versions before 1.28.1 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3570_firmware:*:*:*:*:*:*:*:* Versions before 1.13.2 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3570:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3571_firmware:*:*:*:*:*:*:*:* Versions before 1.14.1 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3571:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_5760_firmware:*:*:*:*:*:*:*:* Versions before 1.20.1 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_5760:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_5770_firmware:*:*:*:*:*:*:*:* Versions before 1.17.1 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_5770:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3420_firmware:*:*:*:*:*:*:*:* Versions before 1.15.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3510_firmware:*:*:*:*:*:*:*:* Versions before 1.22.1 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3520_firmware:*:*:*:*:*:*:*:* Versions before 1.15.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3910_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3910:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_5310_firmware:*:*:*:*:*:*:*:* Versions before 2.20.1 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_5310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_5320_firmware:*:*:*:*:*:*:*:* Versions before 1.11.1 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_5320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_5410_firmware:*:*:*:*:*:*:*:* Versions before 2.19.1 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_5410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_5510_firmware:*:*:*:*:*:*:*:* Versions before 2.19.1 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_5510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_5620_firmware:*:*:*:*:*:*:*:* Versions before 1.14.1 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_5620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_7510_firmware:*:*:*:*:*:*:*:* Versions before 1.16.1 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_7510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_7620_firmware:*:*:*:*:*:*:*:* Versions before 1.13.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_7620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:xps_13_9315_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.8.1 Vulnerable ·Dell
- cpe:2.3:h:dell:xps_13_9315_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:xps_17_9710_firmware:*:*:*:*:*:*:*:* Versions before 1.20.1 Vulnerable ·Dell
- cpe:2.3:h:dell:xps_17_9710:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:xps_17_9720_firmware:*:*:*:*:*:*:*:* Versions before 1.17.1 Vulnerable ·Dell
- cpe:2.3:h:dell:xps_17_9720:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-28064
- 2026-10-03 Alias added: GHSA-4mqc-3x4w-w79p
References
More Dell Alienware M15 R6 Firmware vulnerabilities
- TI-2022-15301 Stack-based buffer overflow in Dell CPG BIOS CVSS 3.1HIGH 8.8
- TI-2024-35208 Weak authentication in Dell Client Platform BIOS CVSS 3.1HIGH 8.2
- TI-2022-10105 Dell BIOS versions contain an Insecure Automated Optimization vulnerability. CVSS 3.1HIGH 7.9
- TI-2022-10104 Stack-based buffer overflow in Dell CPG BIOS CVSS 3.1HIGH 7.8
- TI-2023-23082 Link following in Dell Client Platform, Dell Dock Firmware CVSS 3.1HIGH 7.3
- TI-2022-15298 Heap-based buffer overflow in Dell CPG BIOS CVSS 3.1HIGH 7.1
Sources
- CVE-2023-28064 · CVE Program
- CVE-2023-28064 · NVD
- FIRST EPSS
- GHSA-4mqc-3x4w-w79p · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences