CVE-2023-32475

HighCVSS 7.6/10Last modified Jun 17, 2026

Description

Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.

Metrics

CVSS 3.1 7.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-353

Affected software

Vendor	Product	Versions
Dell	CPG BIOS	>= N/A, < 2.6.0; >= N/A, < 1.13.0; >= N/A, < 1.15.0; >= N/A, < 1.16.0; >= N/A, < 1.9.0; >= N/A, < 1.5.0; >= N/A, < 1.18.0; >= N/A, < 1.8.0; >= N/A, < 1.15.1; >= N/A, < 1.12.0; >= N/A, < 1.17.0; >= N/A, < 1.14.0; >= N/A, < 1.19.0
dell	cpg_bios	<= 2.6

References

Timeline

Published: Jun 7, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-324765.5Dell Hybrid Client version 2.0 contains a Sensitive Data Exposure vulnerability. An unauthenticated malicious user on the device can access CVE-2023-324777.8Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability. A local low-privileged malicious CVE-2023-324784.9Dell PowerStore versions prior to 3.5.0.1 contain an insertion of sensitive information into log file vulnerability. A high privileged malic CVE-2023-324797.8Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege esc CVE-2023-32484.8The All-in-one Floating Contact Form WordPress plugin before 2.1.2 does not sanitise and escape some of its settings, which could allow high CVE-2023-324806.8Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerabili CVE-2023-324816.5Wyse Management Suite versions prior to 4.0 contain a denial-of-service vulnerability. An authenticated malicious user can flood the configu CVE-2023-324824.9Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged CVE-2023-324834.4Wyse Management Suite versions prior to 4.0 contain a sensitive information disclosure vulnerability. An authenticated malicious user having CVE-2023-324849.8Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability CVE-2023-324859.8Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability. A remote unauthenticated attacke CVE-2023-324867.8Dell PowerScale OneFS 9.5.x version contain a privilege escalation vulnerability. A low privilege local attacker could potentially exploit t