CVE-2023-32475
Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical...
Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.6
Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.
- Record
CVE-2023-32475- CVSS 3.1
- 7.6 High
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-353
- Updated
- 2026-11-02
EUVDEUVD-2023-36719
7.6
Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.
- Record
EUVD-2023-36719- CVSS 3.1
- 7.6 High
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c54f-vgc6-pc5x
7.6
Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical...
Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.
- Record
GHSA-c54f-vgc6-pc5x- CVSS 3.1
- 7.6 High
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-353
- Updated
- 2026-11-02
NVD
7.6
Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.
- Record
CVE-2023-32475- CVSS 3.1
- 7.6 High
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-353
- Updated
- 2026-11-02
Affected products
- dell alienware aurora r10 firmware
- dell alienware aurora r15 amd firmware
- dell alienware aurora ryzen edition r14 firmware
- dell alienware m15 r7 amd firmware
- dell alienware m15 ryzen edition r5 firmware
- dell alienware m16 r1 amd firmware
- dell alienware m17 r5 amd firmware
- dell alienware m18 firmware
- dell cpg bios
- dell g15 5515 firmware
- dell g15 5525 firmware
- dell g15 5535 firmware
Show 29 moreShow less
- dell g5 5505 firmware
- dell inspiron 14 5425 firmware
- dell inspiron 14 5435 firmware
- dell inspiron 14 7425 2-in-1 firmware
- dell inspiron 14 7435 2-in-1 firmware
- dell inspiron 15 3515 firmware
- dell inspiron 15 3525 firmware
- dell inspiron 15 3535 firmware
- dell inspiron 16 5625 firmware
- dell inspiron 16 5635 firmware
- dell inspiron 16 7635 2-in-1 firmware
- dell inspiron 24 5415 all-in-one firmware
- dell inspiron 3505 firmware
- dell inspiron 5405 firmware
- dell inspiron 5415 firmware
- dell inspiron 5505 firmware
- dell inspiron 5515 firmware
- dell inspiron 7405 2-in-1 firmware
- dell inspiron 7415 2-in-1 firmware
- dell vostro 14 3425 firmware
- dell vostro 14 3435 firmware
- dell vostro 15 3515 firmware
- dell vostro 15 3525 firmware
- dell vostro 15 3535 firmware
- dell vostro 16 5635 firmware
- dell vostro 3405 firmware
- dell vostro 5415 firmware
- dell vostro 5515 firmware
- dell vostro 5625 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-32475 is a high vulnerability (CVSS 7.6) in Dell Alienware Aurora R10 Firmware, published June 7, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile. No source names a fixed version.