{"id":"CVE-2023-28075","aliases":["EUVD-2023-31800","GHSA-4frm-gc48-jwjx"],"status":"published","title":"Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated...","description":"Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.","severity":{"version":"3.1","score":6.9,"vector":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00187,"percentile":0.08359,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-367"],"published":"2023-08-16T19:15:41Z","modified":"2026-06-17T05:46:48Z","products":[{"vendor":"dell","product":"alienware_m15_r7_firmware"},{"vendor":"dell","product":"alienware_m16_firmware"},{"vendor":"dell","product":"alienware_m18_firmware"},{"vendor":"dell","product":"chengming_3900_firmware"},{"vendor":"dell","product":"chengming_3901_firmware"},{"vendor":"dell","product":"chengming_3910_firmware"},{"vendor":"dell","product":"chengming_3911_firmware"},{"vendor":"dell","product":"chengming_3980_firmware"},{"vendor":"dell","product":"chengming_3990_firmware"},{"vendor":"dell","product":"chengming_3991_firmware"},{"vendor":"dell","product":"cpg bios"},{"vendor":"dell","product":"cpg_bios"},{"vendor":"dell","product":"edge_gateway_3000_firmware"},{"vendor":"dell","product":"edge_gateway_5000_firmware"},{"vendor":"dell","product":"embedded_box_pc_3000_firmware"},{"vendor":"dell","product":"embedded_box_pc_5000_firmware"},{"vendor":"dell","product":"g15_5520_firmware"},{"vendor":"dell","product":"g16_7620_firmware"},{"vendor":"dell","product":"g3_3500_firmware"},{"vendor":"dell","product":"g5_15_5500_firmware"},{"vendor":"dell","product":"g5_15_5590_firmware"},{"vendor":"dell","product":"g7_15_7500_firmware"},{"vendor":"dell","product":"g7_15_7590_firmware"},{"vendor":"dell","product":"g7_17_7700_firmware"},{"vendor":"dell","product":"g7_17_7790_firmware"},{"vendor":"dell","product":"inspiron_14_5410_firmware"},{"vendor":"dell","product":"inspiron_14_5418_firmware"},{"vendor":"dell","product":"inspiron_15_3511_firmware"},{"vendor":"dell","product":"inspiron_15_5510_firmware"},{"vendor":"dell","product":"inspiron_15_5518_firmware"},{"vendor":"dell","product":"inspiron_24_5420_all-in-one_firmware"},{"vendor":"dell","product":"inspiron_24_5421_all-in-one_firmware"},{"vendor":"dell","product":"inspiron_27_7720_all-in-one_firmware"},{"vendor":"dell","product":"inspiron_3020_desktop_firmware"},{"vendor":"dell","product":"inspiron_3020_small_desktop_firmware"},{"vendor":"dell","product":"inspiron_3470_firmware"},{"vendor":"dell","product":"inspiron_3480_firmware"},{"vendor":"dell","product":"inspiron_3481_firmware"},{"vendor":"dell","product":"inspiron_3493_firmware"},{"vendor":"dell","product":"inspiron_3511_firmware"},{"vendor":"dell","product":"inspiron_3580_firmware"},{"vendor":"dell","product":"inspiron_3581_firmware"},{"vendor":"dell","product":"inspiron_3583_firmware"},{"vendor":"dell","product":"inspiron_3584_firmware"},{"vendor":"dell","product":"inspiron_3593_firmware"},{"vendor":"dell","product":"inspiron_3670_firmware"},{"vendor":"dell","product":"inspiron_3780_firmware"},{"vendor":"dell","product":"inspiron_3781_firmware"},{"vendor":"dell","product":"inspiron_3793_firmware"},{"vendor":"dell","product":"inspiron_3880_firmware"},{"vendor":"dell","product":"inspiron_3881_firmware"},{"vendor":"dell","product":"inspiron_3891_firmware"},{"vendor":"dell","product":"inspiron_3910_firmware"},{"vendor":"dell","product":"inspiron_5400_firmware"},{"vendor":"dell","product":"inspiron_5401_aio_firmware"},{"vendor":"dell","product":"inspiron_5410_firmware"},{"vendor":"dell","product":"inspiron_5490_aio_firmware"},{"vendor":"dell","product":"inspiron_5491_aio_firmware"},{"vendor":"dell","product":"inspiron_5493_firmware"},{"vendor":"dell","product":"inspiron_5593_firmware"},{"vendor":"dell","product":"inspiron_7300_2-in-1_firmware"},{"vendor":"dell","product":"inspiron_7490_firmware"},{"vendor":"dell","product":"inspiron_7500_2-in-1_black_firmware"},{"vendor":"dell","product":"inspiron_7500_firmware"},{"vendor":"dell","product":"inspiron_7501_firmware"},{"vendor":"dell","product":"inspiron_7510_firmware"},{"vendor":"dell","product":"inspiron_7590_firmware"},{"vendor":"dell","product":"inspiron_7591_firmware"},{"vendor":"dell","product":"inspiron_7610_firmware"},{"vendor":"dell","product":"inspiron_7700_all-in-one_firmware"},{"vendor":"dell","product":"inspiron_7790_firmware"},{"vendor":"dell","product":"latitude_3120_firmware"},{"vendor":"dell","product":"latitude_3140_firmware"},{"vendor":"dell","product":"latitude_3180_firmware"},{"vendor":"dell","product":"latitude_3189_firmware"},{"vendor":"dell","product":"latitude_3190_2-in-1_firmware"},{"vendor":"dell","product":"latitude_3190_firmware"},{"vendor":"dell","product":"latitude_3301_firmware"},{"vendor":"dell","product":"latitude_3310_2-in-1_firmware"},{"vendor":"dell","product":"latitude_3310_firmware"},{"vendor":"dell","product":"latitude_3320_firmware"},{"vendor":"dell","product":"latitude_3330_firmware"},{"vendor":"dell","product":"latitude_3340_firmware"},{"vendor":"dell","product":"latitude_3400_firmware"},{"vendor":"dell","product":"latitude_3430_firmware"},{"vendor":"dell","product":"latitude_3440_firmware"},{"vendor":"dell","product":"latitude_3500_firmware"},{"vendor":"dell","product":"latitude_3530_firmware"},{"vendor":"dell","product":"latitude_3540_firmware"},{"vendor":"dell","product":"latitude_5280_firmware"},{"vendor":"dell","product":"latitude_5285_2-in-1_firmware"},{"vendor":"dell","product":"latitude_5288_firmware"},{"vendor":"dell","product":"latitude_5290_2-in-1_firmware"},{"vendor":"dell","product":"latitude_5300_2-in-1_firmware"},{"vendor":"dell","product":"latitude_5300_firmware"},{"vendor":"dell","product":"latitude_5310_2-in-1_firmware"},{"vendor":"dell","product":"latitude_5310_firmware"},{"vendor":"dell","product":"latitude_5400_firmware"},{"vendor":"dell","product":"latitude_5411_firmware"},{"vendor":"dell","product":"latitude_5420_firmware"},{"vendor":"dell","product":"latitude_5420_rugged_firmware"},{"vendor":"dell","product":"latitude_5424_rugged_firmware"},{"vendor":"dell","product":"latitude_5430_firmware"},{"vendor":"dell","product":"latitude_5431_firmware"},{"vendor":"dell","product":"latitude_5480_firmware"},{"vendor":"dell","product":"latitude_5488_firmware"},{"vendor":"dell","product":"latitude_5500_firmware"},{"vendor":"dell","product":"latitude_5511_firmware"},{"vendor":"dell","product":"latitude_5580_firmware"},{"vendor":"dell","product":"latitude_7200_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7210_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7230_rugged_extreme_tablet_firmware"},{"vendor":"dell","product":"latitude_7280_firmware"},{"vendor":"dell","product":"latitude_7285_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7290_firmware"},{"vendor":"dell","product":"latitude_7300_firmware"},{"vendor":"dell","product":"latitude_7310_firmware"},{"vendor":"dell","product":"latitude_7320_firmware"},{"vendor":"dell","product":"latitude_7380_firmware"},{"vendor":"dell","product":"latitude_7390_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7390_firmware"},{"vendor":"dell","product":"latitude_7400_2-in-1_firmware"},{"vendor":"dell","product":"latitude_7400_firmware"},{"vendor":"dell","product":"latitude_7410_firmware"},{"vendor":"dell","product":"latitude_7420_firmware"},{"vendor":"dell","product":"latitude_7424_rugged_extreme_firmware"},{"vendor":"dell","product":"latitude_7480_firmware"},{"vendor":"dell","product":"latitude_7490_firmware"},{"vendor":"dell","product":"latitude_7520_firmware"},{"vendor":"dell","product":"latitude_9330_firmware"},{"vendor":"dell","product":"latitude_9410_firmware"},{"vendor":"dell","product":"latitude_9510_firmware"},{"vendor":"dell","product":"latitude_9520_firmware"},{"vendor":"dell","product":"latitude_rugged_5430_firmware"},{"vendor":"dell","product":"latitude_rugged_7220_firmware"},{"vendor":"dell","product":"latitude_rugged_7220ex_firmware"},{"vendor":"dell","product":"latitude_rugged_7330_firmware"},{"vendor":"dell","product":"optiplex_3000_firmware"},{"vendor":"dell","product":"optiplex_3000_thin_client_firmware"},{"vendor":"dell","product":"optiplex_3050_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_3090_firmware"},{"vendor":"dell","product":"optiplex_3280_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_5000_firmware"},{"vendor":"dell","product":"optiplex_5090_firmware"},{"vendor":"dell","product":"optiplex_5250_firmware"},{"vendor":"dell","product":"optiplex_5260_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_5270_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_5400_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_5480_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_5490_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7000_firmware"},{"vendor":"dell","product":"optiplex_7060_firmware"},{"vendor":"dell","product":"optiplex_7070_firmware"},{"vendor":"dell","product":"optiplex_7070_ultra_firmware"},{"vendor":"dell","product":"optiplex_7080_firmware"},{"vendor":"dell","product":"optiplex_7090_firmware"},{"vendor":"dell","product":"optiplex_7400_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7410_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7450_firmware"},{"vendor":"dell","product":"optiplex_7460_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7470_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7480_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7490_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7760_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7770_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_7780_all-in-one_firmware"},{"vendor":"dell","product":"optiplex_micro_plus_7010_firmware"},{"vendor":"dell","product":"optiplex_small_form_factor_plus_7010_firmware"},{"vendor":"dell","product":"optiplex_tower_plus_7010_firmware"},{"vendor":"dell","product":"optiplex_xe4_firmware"},{"vendor":"dell","product":"precision_3240_compact_firmware"},{"vendor":"dell","product":"precision_3260_compact_firmware"},{"vendor":"dell","product":"precision_3260_xe_compact_firmware"},{"vendor":"dell","product":"precision_3450_firmware"},{"vendor":"dell","product":"precision_3460_small_form_factor_firmware"},{"vendor":"dell","product":"precision_3460_xe_small_form_factor_firmware"},{"vendor":"dell","product":"precision_3470_firmware"},{"vendor":"dell","product":"precision_3520_firmware"},{"vendor":"dell","product":"precision_3540_firmware"},{"vendor":"dell","product":"precision_3551_firmware"},{"vendor":"dell","product":"precision_3630_tower_firmware"},{"vendor":"dell","product":"precision_3640_tower_firmware"},{"vendor":"dell","product":"precision_3650_tower_firmware"},{"vendor":"dell","product":"precision_3660_firmware"},{"vendor":"dell","product":"precision_3930_rack_firmware"},{"vendor":"dell","product":"precision_5470_firmware"},{"vendor":"dell","product":"precision_5520_firmware"},{"vendor":"dell","product":"precision_5530_2-in-1_firmware"},{"vendor":"dell","product":"precision_5530_firmware"},{"vendor":"dell","product":"precision_5540_firmware"},{"vendor":"dell","product":"precision_5570_firmware"},{"vendor":"dell","product":"precision_5680_firmware"},{"vendor":"dell","product":"precision_5720_aio_firmware"},{"vendor":"dell","product":"precision_5820_tower_firmware"},{"vendor":"dell","product":"precision_5860_tower_firmware"},{"vendor":"dell","product":"precision_7520_firmware"},{"vendor":"dell","product":"precision_7540_firmware"},{"vendor":"dell","product":"precision_7550_firmware"},{"vendor":"dell","product":"precision_7720_firmware"},{"vendor":"dell","product":"precision_7740_firmware"},{"vendor":"dell","product":"precision_7750_firmware"},{"vendor":"dell","product":"precision_7820_tower_firmware"},{"vendor":"dell","product":"precision_7920_tower_firmware"},{"vendor":"dell","product":"precision_7960_tower_firmware"},{"vendor":"dell","product":"vostro_3020_sff_firmware"},{"vendor":"dell","product":"vostro_3020_t_firmware"},{"vendor":"dell","product":"vostro_3070_firmware"},{"vendor":"dell","product":"vostro_3470_firmware"},{"vendor":"dell","product":"vostro_3480_firmware"},{"vendor":"dell","product":"vostro_3481_firmware"},{"vendor":"dell","product":"vostro_3510_firmware"},{"vendor":"dell","product":"vostro_3580_firmware"},{"vendor":"dell","product":"vostro_3581_firmware"},{"vendor":"dell","product":"vostro_3583_firmware"},{"vendor":"dell","product":"vostro_3584_firmware"},{"vendor":"dell","product":"vostro_3670_firmware"},{"vendor":"dell","product":"vostro_3681_firmware"},{"vendor":"dell","product":"vostro_3690_firmware"},{"vendor":"dell","product":"vostro_3710_firmware"},{"vendor":"dell","product":"vostro_3881_firmware"},{"vendor":"dell","product":"vostro_3888_firmware"},{"vendor":"dell","product":"vostro_3890_firmware"},{"vendor":"dell","product":"vostro_3910_firmware"},{"vendor":"dell","product":"vostro_5410_firmware"},{"vendor":"dell","product":"vostro_5491_firmware"},{"vendor":"dell","product":"vostro_5510_firmware"},{"vendor":"dell","product":"vostro_5591_firmware"},{"vendor":"dell","product":"vostro_5890_firmware"},{"vendor":"dell","product":"vostro_7500_firmware"},{"vendor":"dell","product":"vostro_7510_firmware"},{"vendor":"dell","product":"vostro_7590_firmware"},{"vendor":"dell","product":"wyse_5470_all-in-one_firmware"},{"vendor":"dell","product":"wyse_5470_firmware"},{"vendor":"dell","product":"xps_13_7390_2-in-1_firmware"},{"vendor":"dell","product":"xps_13_7390_firmware"},{"vendor":"dell","product":"xps_13_9300_firmware"},{"vendor":"dell","product":"xps_13_9305_firmware"},{"vendor":"dell","product":"xps_13_9310_2-in-1_firmware"},{"vendor":"dell","product":"xps_13_9310_firmware"},{"vendor":"dell","product":"xps_13_9315_firmware"},{"vendor":"dell","product":"xps_13_9380_firmware"},{"vendor":"dell","product":"xps_15_7590_firmware"},{"vendor":"dell","product":"xps_15_9520_firmware"},{"vendor":"dell","product":"xps_15_9575_2-in-1_firmware"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000212817/dsa-2023-152-security-update-for-a-dell-client-bios-vulnerability","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28075"},{"url":"https://github.com/advisories/GHSA-4frm-gc48-jwjx"}],"sources":{"cve":[{"id":"CVE-2023-28075","description":"\nDell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.\n\n","status":"published","published":"2023-08-16T19:15:41.959Z","modified":"2024-10-08T19:02:39.4Z","cvss":[{"version":"3.1","score":6.9,"vector":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:35:32.752775Z"}],"euvd":[{"id":"EUVD-2023-31800","description":"\nDell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.\n\n","status":"published","published":"2023-08-16T19:15:41Z","modified":"2024-10-08T19:02:39Z","cvss":[{"version":"3.1","score":6.9,"vector":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:27:44.844048Z"}],"ghsa":[{"id":"GHSA-4frm-gc48-jwjx","title":"\nDell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated...","description":"\nDell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.\n\n","status":"published","published":"2023-08-16T21:31:04Z","modified":"2024-04-04T07:00:24Z","cvss":[{"version":"3.1","score":6.9,"vector":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:56:47.648865Z"}],"nvd":[{"id":"CVE-2023-28075","description":"\nDell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.\n\n","status":"published","published":"2023-08-16T20:15:09.427Z","modified":"2026-06-17T05:46:48.153Z","cvss":[{"version":"3.1","score":6.9,"vector":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:08:24.487686Z"}]}}