Medium severity · published Nov 16, 2023
CVE-2023-32469
Dell Precision Tower BIOS contains an Improper Input Validation vulnerability
6.7
CVSS
0.2%
EPSS
No
On KEV
Description
Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges could potentially exploit this vulnerability to perform arbitrary code execution.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DP
Dell Precision 5820 Tower, Dell Precision 7820 Tower, Dell Precision 7920 Tower · Dell
Versions prior to 2.32.0; Versions prior to 2.36.0 · source: vendor
P5
Precision 5820 Firmware · Dell
before 2.32.0 · source: NVD
P7
Precision 7820 Firmware · Dell
before 2.36.0 · source: NVD
P7
Precision 7920 Firmware · Dell
before 2.36.0 · source: NVD
Affected product
DP
Dell Precision 5820 Tower, Dell Precision 7820 Tower, Dell Precision 7920 Tower
Dell