{"id":"CVE-2023-28064","aliases":["EUVD-2023-31789","GHSA-4mqc-3x4w-w79p"],"status":"published","title":"Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker...","description":"Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00264,"percentile":0.18443,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2023-06-23T10:57:51Z","modified":"2026-06-17T05:46:46Z","products":[{"vendor":"dell","product":"alienware_m15_r6_firmware"},{"vendor":"dell","product":"alienware_m15_r7_firmware"},{"vendor":"dell","product":"chengming_3900_firmware"},{"vendor":"dell","product":"chengming_3901_firmware"},{"vendor":"dell","product":"cpg bios"},{"vendor":"dell","product":"g15_5510_firmware"},{"vendor":"dell","product":"g15_5511_firmware"},{"vendor":"dell","product":"g15_5520_firmware"},{"vendor":"dell","product":"inspiron_14_5410_firmware"},{"vendor":"dell","product":"inspiron_14_5418_firmware"},{"vendor":"dell","product":"inspiron_14_plus_7420_firmware"},{"vendor":"dell","product":"inspiron_15_3511_firmware"},{"vendor":"dell","product":"inspiron_15_5510_firmware"},{"vendor":"dell","product":"inspiron_15_5518_firmware"},{"vendor":"dell","product":"inspiron_16_7620_2-in-1_firmware"},{"vendor":"dell","product":"inspiron_16_plus_7620_firmware"},{"vendor":"dell","product":"inspiron_3511_firmware"},{"vendor":"dell","product":"inspiron_3520_firmware"},{"vendor":"dell","product":"inspiron_3891_firmware"},{"vendor":"dell","product":"inspiron_3910_firmware"},{"vendor":"dell","product":"inspiron_5310_firmware"},{"vendor":"dell","product":"inspiron_5320_firmware"},{"vendor":"dell","product":"inspiron_5410_firmware"},{"vendor":"dell","product":"inspiron_5420_firmware"},{"vendor":"dell","product":"inspiron_5620_firmware"},{"vendor":"dell","product":"inspiron_7420_firmware"},{"vendor":"dell","product":"inspiron_7510_firmware"},{"vendor":"dell","product":"inspiron_7610_firmware"},{"vendor":"dell","product":"latitude_3120_firmware"},{"vendor":"dell","product":"latitude_3320_firmware"},{"vendor":"dell","product":"latitude_3330_firmware"},{"vendor":"dell","product":"latitude_3420_firmware"},{"vendor":"dell","product":"latitude_3430_firmware"},{"vendor":"dell","product":"latitude_3520_firmware"},{"vendor":"dell","product":"latitude_3530_firmware"},{"vendor":"dell","product":"latitude_5320_firmware"},{"vendor":"dell","product":"latitude_5330_firmware"},{"vendor":"dell","product":"latitude_5520_firmware"},{"vendor":"dell","product":"latitude_5530_firmware"},{"vendor":"dell","product":"latitude_5531_firmware"},{"vendor":"dell","product":"latitude_7330_firmware"},{"vendor":"dell","product":"latitude_7430_firmware"},{"vendor":"dell","product":"latitude_7530_firmware"},{"vendor":"dell","product":"latitude_rugged_5430_firmware"},{"vendor":"dell","product":"latitude_rugged_7330_firmware"},{"vendor":"dell","product":"optiplex_3000_firmware"},{"vendor":"dell","product":"optiplex_5000_firmware"},{"vendor":"dell","product":"optiplex_5400_firmware"},{"vendor":"dell","product":"optiplex_7000_firmware"},{"vendor":"dell","product":"optiplex_7000_oem_firmware"},{"vendor":"dell","product":"optiplex_7400_firmware"},{"vendor":"dell","product":"optiplex_7410_all-in-one_firmware"},{"vendor":"dell","product":"precision_3560_firmware"},{"vendor":"dell","product":"precision_3570_firmware"},{"vendor":"dell","product":"precision_3571_firmware"},{"vendor":"dell","product":"precision_5760_firmware"},{"vendor":"dell","product":"precision_5770_firmware"},{"vendor":"dell","product":"vostro_3420_firmware"},{"vendor":"dell","product":"vostro_3510_firmware"},{"vendor":"dell","product":"vostro_3520_firmware"},{"vendor":"dell","product":"vostro_3910_firmware"},{"vendor":"dell","product":"vostro_5310_firmware"},{"vendor":"dell","product":"vostro_5320_firmware"},{"vendor":"dell","product":"vostro_5410_firmware"},{"vendor":"dell","product":"vostro_5510_firmware"},{"vendor":"dell","product":"vostro_5620_firmware"},{"vendor":"dell","product":"vostro_7510_firmware"},{"vendor":"dell","product":"vostro_7620_firmware"},{"vendor":"dell","product":"xps_13_9315_2-in-1_firmware"},{"vendor":"dell","product":"xps_17_9710_firmware"},{"vendor":"dell","product":"xps_17_9720_firmware"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000214778/dsa-2023-174-dell-client-bios-security-update-for-an-out-of-bounds-write-vulnerability","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28064"},{"url":"https://github.com/advisories/GHSA-4mqc-3x4w-w79p"}],"sources":{"cve":[{"id":"CVE-2023-28064","description":"\nDell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.\n\n","status":"published","published":"2023-06-23T10:57:51.106Z","modified":"2024-11-07T20:52:58.76Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:35:32.752775Z"}],"euvd":[{"id":"EUVD-2023-31789","description":"\nDell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.\n\n","status":"published","published":"2023-06-23T10:57:51Z","modified":"2024-11-07T20:52:58Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T00:05:07.826667Z"}],"ghsa":[{"id":"GHSA-4mqc-3x4w-w79p","title":"\nDell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker...","description":"\nDell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.\n\n","status":"published","published":"2023-06-23T12:30:18Z","modified":"2024-04-04T05:07:12Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"low"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:56:29.503716Z"}],"nvd":[{"id":"CVE-2023-28064","description":"\nDell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.\n\n","status":"published","published":"2023-06-23T11:15:09.697Z","modified":"2026-06-17T05:46:46.743Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:08:12.414559Z"}]}}