CVE-2023-32480
Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical...
Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability to perform arbitrary code execution.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability to perform arbitrary code execution.
- Record
CVE-2023-32480- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2023-36724
Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability to perform arbitrary code execution.
- Record
EUVD-2023-36724- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x39f-m4x2-52g8
Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical...
Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability to perform arbitrary code execution.
- Record
GHSA-x39f-m4x2-52g8- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
Dell BIOS contains an Improper Input Validation vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability to perform arbitrary code execution.
- Record
CVE-2023-32480- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
- dell alienware m15 r7 firmware
- dell cpg bios
- dell g15 5510 firmware
- dell g15 5520 firmware
- dell inspiron 14 5410 firmware
- dell inspiron 14 5418 firmware
- dell inspiron 15 5510 firmware
- dell inspiron 15 5518 firmware
- dell inspiron 16 7620 2-in-1 firmware
- dell inspiron 3520 firmware
- dell inspiron 5410 firmware
- dell inspiron 5420 firmware
Show 20 moreShow less
- dell inspiron 5620 firmware
- dell inspiron 7420 firmware
- dell inspiron 7510 firmware
- dell inspiron 7610 firmware
- dell latitude 3320 firmware
- dell latitude 3420 firmware
- dell latitude 3430 firmware
- dell latitude 3520 firmware
- dell latitude 3530 firmware
- dell precision 5760 firmware
- dell precision 5770 firmware
- dell vostro 3420 firmware
- dell vostro 3520 firmware
- dell vostro 5410 firmware
- dell vostro 5510 firmware
- dell vostro 5620 firmware
- dell vostro 7510 firmware
- dell xps 13 9315 2-in-1 firmware
- dell xps 17 9710 firmware
- dell xps 17 9720 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-32480 is a medium vulnerability (CVSS 6.8) in Dell Alienware M15 R7 Firmware, published June 23, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 25th percentile. No source names a fixed version.