{"id":"CVE-2023-32475","aliases":["EUVD-2023-36719","GHSA-c54f-vgc6-pc5x"],"status":"published","title":"Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical...","description":"Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00168,"percentile":0.06057,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-353"],"published":"2024-06-07T02:13:17Z","modified":"2026-06-17T05:58:55Z","products":[{"vendor":"dell","product":"alienware_aurora_r10_firmware"},{"vendor":"dell","product":"alienware_aurora_r15_amd_firmware"},{"vendor":"dell","product":"alienware_aurora_ryzen_edition_r14_firmware"},{"vendor":"dell","product":"alienware_m15_r7_amd_firmware"},{"vendor":"dell","product":"alienware_m15_ryzen_edition_r5_firmware"},{"vendor":"dell","product":"alienware_m16_r1_amd_firmware"},{"vendor":"dell","product":"alienware_m17_r5_amd_firmware"},{"vendor":"dell","product":"alienware_m18_firmware"},{"vendor":"dell","product":"cpg bios"},{"vendor":"dell","product":"cpg_bios"},{"vendor":"dell","product":"g15_5515_firmware"},{"vendor":"dell","product":"g15_5525_firmware"},{"vendor":"dell","product":"g15_5535_firmware"},{"vendor":"dell","product":"g5_5505_firmware"},{"vendor":"dell","product":"inspiron_14_5425_firmware"},{"vendor":"dell","product":"inspiron_14_5435_firmware"},{"vendor":"dell","product":"inspiron_14_7425_2-in-1_firmware"},{"vendor":"dell","product":"inspiron_14_7435_2-in-1_firmware"},{"vendor":"dell","product":"inspiron_15_3515_firmware"},{"vendor":"dell","product":"inspiron_15_3525_firmware"},{"vendor":"dell","product":"inspiron_15_3535_firmware"},{"vendor":"dell","product":"inspiron_16_5625_firmware"},{"vendor":"dell","product":"inspiron_16_5635_firmware"},{"vendor":"dell","product":"inspiron_16_7635_2-in-1_firmware"},{"vendor":"dell","product":"inspiron_24_5415_all-in-one_firmware"},{"vendor":"dell","product":"inspiron_3505_firmware"},{"vendor":"dell","product":"inspiron_5405_firmware"},{"vendor":"dell","product":"inspiron_5415_firmware"},{"vendor":"dell","product":"inspiron_5505_firmware"},{"vendor":"dell","product":"inspiron_5515_firmware"},{"vendor":"dell","product":"inspiron_7405_2-in-1_firmware"},{"vendor":"dell","product":"inspiron_7415_2-in-1_firmware"},{"vendor":"dell","product":"vostro_14_3425_firmware"},{"vendor":"dell","product":"vostro_14_3435_firmware"},{"vendor":"dell","product":"vostro_15_3515_firmware"},{"vendor":"dell","product":"vostro_15_3525_firmware"},{"vendor":"dell","product":"vostro_15_3535_firmware"},{"vendor":"dell","product":"vostro_16_5635_firmware"},{"vendor":"dell","product":"vostro_3405_firmware"},{"vendor":"dell","product":"vostro_5415_firmware"},{"vendor":"dell","product":"vostro_5515_firmware"},{"vendor":"dell","product":"vostro_5625_firmware"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000215644/dsa-2023-222-security-update-for-an-amd-bios-vulnerability","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32475"},{"url":"https://github.com/advisories/GHSA-c54f-vgc6-pc5x"}],"sources":{"cve":[{"id":"CVE-2023-32475","description":"Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.","status":"published","published":"2024-06-07T02:13:17.515Z","modified":"2024-08-02T15:18:37.099Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-353"],"updated_at":"2026-11-02T14:35:29.381004Z"}],"euvd":[{"id":"EUVD-2023-36719","description":"Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.","status":"published","published":"2024-06-07T02:13:17Z","modified":"2024-08-02T15:18:37Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:05.016714Z"}],"ghsa":[{"id":"GHSA-c54f-vgc6-pc5x","title":"Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical...","description":"Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.","status":"published","published":"2024-06-07T03:31:07Z","modified":"2024-06-07T03:31:08Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-353"],"updated_at":"2026-11-02T14:57:25.971514Z"}],"nvd":[{"id":"CVE-2023-32475","description":"Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.","status":"published","published":"2024-06-07T03:15:08.95Z","modified":"2026-06-17T05:58:55.17Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-353"],"updated_at":"2026-11-02T14:09:17.205287Z"}]}}
