CVE-2023-39251
Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high...
Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.
- Record
CVE-2023-39251- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2023-42985
Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.
- Record
EUVD-2023-42985- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jh5h-57c3-2c78
Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high...
Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.
- Record
GHSA-jh5h-57c3-2c78- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.
- Record
CVE-2023-39251- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
- dell cpg bios
- dell inspiron 7510 firmware
- dell inspiron 7610 firmware
- dell latitude 5430 rugged firmware
- dell latitude 5521 firmware
- dell latitude 7330 rugged firmware
- dell precision 3561 firmware
- dell precision 5560 firmware
- dell precision 5760 firmware
- dell precision 7560 firmware
- dell precision 7760 firmware
- dell vostro 7510 firmware
Show 2 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-39251 is a medium vulnerability (CVSS 6.7) in Dell Cpg Bios, published December 22, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 5th percentile. No source names a fixed version.