alienware_m15_r7_firmware 安全漏洞 (CVE-2023-32453)

CVE编号

CVE-2023-32453

利用情况

暂无

补丁情况

N/A

披露时间

2023-08-17
漏洞描述

Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may potentially exploit this vulnerability in order to modify a security-critical UEFI variable without knowledge of the BIOS administrator.


解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接
https://www.dell.com/support/kbdoc/en-us/000215217/dsa-2023-190-dell-client-bios
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
系统 dell alienware_m15_r7_firmware * Up to
(excluding)
1.18.0
运行在以下环境
系统 dell alienware_m16_firmware * Up to
(excluding)
1.10.1
运行在以下环境
系统 dell alienware_m18_firmware * Up to
(excluding)
1.10.1
运行在以下环境
系统 dell chengming_3900_firmware * Up to
(excluding)
1.15.0
运行在以下环境
系统 dell chengming_3901_firmware * Up to
(excluding)
1.15.0
运行在以下环境
系统 dell chengming_3910_firmware * Up to
(excluding)
1.6.0
运行在以下环境
系统 dell chengming_3911_firmware * Up to
(excluding)
1.6.0
运行在以下环境
系统 dell g15_5520_firmware * Up to
(excluding)
1.18.0
运行在以下环境
系统 dell g16_7620_firmware * Up to
(excluding)
1.18.0
运行在以下环境
系统 dell g3_3500_firmware * Up to
(excluding)
1.26.0
运行在以下环境
系统 dell g5_15_5500_firmware * Up to
(excluding)
1.26.0
运行在以下环境
系统 dell g7_15_7500_firmware * Up to
(excluding)
1.26.0
运行在以下环境
系统 dell g7_17_7700_firmware * Up to
(excluding)
1.26.0
运行在以下环境
系统 dell inspiron_14_5410_firmware * Up to
(excluding)
2.20.0
运行在以下环境
系统 dell inspiron_14_5418_firmware * Up to
(excluding)
2.20.0
运行在以下环境
系统 dell inspiron_15_3511_firmware * Up to
(excluding)
1.23.0
运行在以下环境
系统 dell inspiron_15_5510_firmware * Up to
(excluding)
2.20.0
运行在以下环境
系统 dell inspiron_15_5518_firmware * Up to
(excluding)
2.20.0
运行在以下环境
系统 dell inspiron_24_5420_all-in-one_firmware * Up to
(excluding)
1.4.0
运行在以下环境
系统 dell inspiron_24_5421_all-in-one_firmware * Up to
(excluding)
1.4.0
运行在以下环境
系统 dell inspiron_27_7720_all-in-one_firmware * Up to
(excluding)
1.4.0
运行在以下环境
系统 dell inspiron_3020_desktop_firmware * Up to
(excluding)
1.6.0
运行在以下环境
系统 dell inspiron_3020_small_desktop_firmware * Up to
(including)
1.6.0
运行在以下环境
系统 dell inspiron_3493_firmware * Up to
(excluding)
1.27.0
运行在以下环境
系统 dell inspiron_3511_firmware * Up to
(excluding)
1.23.0
运行在以下环境
系统 dell inspiron_3593_firmware * Up to
(excluding)
1.27.0
运行在以下环境
系统 dell inspiron_3793_firmware * Up to
(excluding)
1.27.0
运行在以下环境
系统 dell inspiron_3891_firmware * Up to
(excluding)
1.19.0
运行在以下环境
系统 dell inspiron_3910_firmware * Up to
(excluding)
1.15.0
运行在以下环境
系统 dell inspiron_5410_firmware * Up to
(excluding)
2.20.0
运行在以下环境
系统 dell inspiron_5493_firmware * Up to
(excluding)
1.27.0
运行在以下环境
系统 dell inspiron_5593_firmware * Up to
(excluding)
1.27.0
运行在以下环境
系统 dell inspiron_7300_2-in-1_firmware * Up to
(excluding)
1.19.0
运行在以下环境
系统 dell inspiron_7490_firmware * Up to
(excluding)
1.22.0
运行在以下环境
系统 dell inspiron_7500_2-in-1_black_firmware * Up to
(excluding)
1.19.0
运行在以下环境
系统 dell inspiron_7500_firmware * Up to
(excluding)
1.24.0
运行在以下环境
系统 dell inspiron_7501_firmware * Up to
(excluding)
1.24.0
运行在以下环境
系统 dell inspiron_7510_firmware * Up to
(excluding)
1.17.0
运行在以下环境
系统 dell inspiron_7610_firmware * Up to
(excluding)
1.17.0
运行在以下环境
系统 dell latitude_3140_firmware * Up to
(excluding)
1.8.0
运行在以下环境
系统 dell latitude_3301_firmware * Up to
(excluding)
1.27.0
运行在以下环境
系统 dell latitude_3320_firmware * Up to
(excluding)
1.23.0
运行在以下环境
系统 dell latitude_3330_firmware * Up to
(excluding)
1.15.0
运行在以下环境
系统 dell latitude_3340_firmware * Up to
(excluding)
1.6.0
运行在以下环境
系统 dell latitude_3400_firmware * Up to
(excluding)
1.29.0
运行在以下环境
系统 dell latitude_3430_firmware * Up to
(excluding)
1.12.0
运行在以下环境
系统 dell latitude_3440_firmware * Up to
(excluding)
1.6.0
运行在以下环境
系统 dell latitude_3500_firmware * Up to
(excluding)
1.29.0
运行在以下环境
系统 dell latitude_3530_firmware * Up to
(excluding)
1.12.0
运行在以下环境
系统 dell latitude_3540_firmware * Up to
(excluding)
1.6.0
运行在以下环境
系统 dell latitude_5420_firmware * Up to
(excluding)
1.30.0
运行在以下环境
系统 dell latitude_5430_firmware * Up to
(excluding)
1.15.0
运行在以下环境
系统 dell latitude_5431_firmware * Up to
(excluding)
1.15.0
运行在以下环境
系统 dell latitude_7230_rugged_extreme_tablet_firmware * Up to
(excluding)
1.8.0
运行在以下环境
系统 dell latitude_7320_firmware * Up to
(excluding)
1.28.0
运行在以下环境
系统 dell latitude_7420_firmware * Up to
(excluding)
1.28.0
运行在以下环境
系统 dell latitude_7520_firmware * Up to
(excluding)
1.28.0
运行在以下环境
系统 dell latitude_9330_firmware * Up to
(excluding)
1.13.0
运行在以下环境
系统 dell latitude_9520_firmware * Up to
(excluding)
1.24.0
运行在以下环境
系统 dell latitude_rugged_5430_firmware * Up to
(excluding)
1.20.0
运行在以下环境
系统 dell latitude_rugged_7330_firmware * Up to
(excluding)
1.20.0
运行在以下环境
系统 dell optiplex_3000_firmware * Up to
(excluding)
1.15.0
运行在以下环境
系统 dell optiplex_3000_thin_client_firmware * Up to
(excluding)
1.11.0
运行在以下环境
系统 dell optiplex_5000_firmware * Up to
(excluding)
1.15.0
运行在以下环境
系统 dell optiplex_5090_firmware * Up to
(excluding)
1.19.0
运行在以下环境
系统 dell optiplex_5400_all-in-one_firmware * Up to
(excluding)
1.1.30
运行在以下环境
系统 dell optiplex_5490_all-in-one_firmware * Up to
(excluding)
1.23.0
运行在以下环境
系统 dell optiplex_7000_firmware * Up to
(excluding)
1.15.0
运行在以下环境
系统 dell optiplex_7090_firmware * Up to
(excluding)
1.19.0
运行在以下环境
系统 dell optiplex_7400_all-in-one_firmware * Up to
(excluding)
1.1.30
运行在以下环境
系统 dell optiplex_7410_all-in-one_firmware * Up to
(excluding)
1.6.0
运行在以下环境
系统 dell optiplex_7490_all-in-one_firmware * Up to
(excluding)
1.23.0
运行在以下环境
系统 dell optiplex_micro_plus_7010_firmware * Up to
(excluding)
1.6.0
运行在以下环境
系统 dell optiplex_small_form_factor_plus_7010_firmware * Up to
(excluding)
1.6.0
运行在以下环境
系统 dell optiplex_tower_plus_7010_firmware * Up to
(excluding)
1.6.0
运行在以下环境
系统 dell optiplex_xe4_firmware * Up to
(excluding)
1.15.0
运行在以下环境
系统 dell precision_3260_compact_firmware * Up to
(excluding)
2.7.0
运行在以下环境
系统 dell precision_3260_xe_compact_firmware * Up to
(excluding)
2.7.0
运行在以下环境
系统 dell precision_3450_firmware * Up to
(excluding)
1.19.0
运行在以下环境
系统 dell precision_3460_small_form_factor_firmware * Up to
(excluding)
2.7.0
运行在以下环境
系统 dell precision_3460_xe_small_form_factor_firmware * Up to
(excluding)
2.7.0
运行在以下环境
系统 dell precision_3470_firmware * Up to
(excluding)
1.15.0
运行在以下环境
系统 dell precision_3650_tower_firmware * Up to
(excluding)
1.24.0
运行在以下环境
系统 dell precision_3660_firmware * Up to
(excluding)
2.7.0
运行在以下环境
系统 dell precision_5470_firmware * Up to
(excluding)
1.15.0
运行在以下环境
系统 dell precision_5570_firmware * Up to
(excluding)
1.16.0
运行在以下环境
系统 dell precision_5680_firmware * Up to
(excluding)
1.4.1
运行在以下环境
系统 dell precision_5860_tower_firmware * Up to
(excluding)
1.0.10
运行在以下环境
系统 dell precision_7960_tower_firmware * Up to
(excluding)
1.0.9
运行在以下环境
系统 dell vostro_3020_sff_firmware * Up to
(excluding)
1.6.0
运行在以下环境
系统 dell vostro_3020_t_firmware * Up to
(excluding)
1.6.0
运行在以下环境
系统 dell vostro_3510_firmware * Up to
(excluding)
1.23.0
运行在以下环境
系统 dell vostro_3690_firmware * Up to
(excluding)
1.19.0
运行在以下环境
系统 dell vostro_3710_firmware * Up to
(excluding)
1.15.0
运行在以下环境
系统 dell vostro_3890_firmware * Up to
(excluding)
1.19.0
运行在以下环境
系统 dell vostro_3910_firmware * Up to
(excluding)
1.15.0
运行在以下环境
系统 dell vostro_5410_firmware * Up to
(excluding)
2.20.0
运行在以下环境
系统 dell vostro_5491_firmware * Up to
(excluding)
1.27.0
运行在以下环境
系统 dell vostro_5510_firmware * Up to
(excluding)
2.20.0
运行在以下环境
系统 dell vostro_5591_firmware * Up to
(excluding)
1.27.0
运行在以下环境
系统 dell vostro_5890_firmware * Up to
(excluding)
1.19.0
运行在以下环境
系统 dell vostro_7500_firmware * Up to
(excluding)
1.24.0
运行在以下环境
系统 dell vostro_7510_firmware * Up to
(excluding)
1.17.0
运行在以下环境
系统 dell xps_13_7390_2-in-1_firmware * Up to
(excluding)
1.26.0
运行在以下环境
系统 dell xps_13_7390_firmware * Up to
(excluding)
1.21.0
运行在以下环境
系统 dell xps_13_9300_firmware * Up to
(excluding)
1.19.0
运行在以下环境
系统 dell xps_13_9305_firmware * Up to
(excluding)
1.16.0
运行在以下环境
系统 dell xps_13_9310_2-in-1_firmware * Up to
(excluding)
2.19.0
运行在以下环境
系统 dell xps_13_9310_firmware * Up to
(excluding)
3.17.0
运行在以下环境
系统 dell xps_13_9315_firmware * Up to
(excluding)
1.13.0
运行在以下环境
系统 dell xps_15_9520_firmware * Up to
(excluding)
1.16.0
运行在以下环境
硬件 dell alienware_m15_r7 - -
运行在以下环境
硬件 dell alienware_m16 - -
运行在以下环境
硬件 dell alienware_m18 - -
运行在以下环境
硬件 dell chengming_3900 - -
运行在以下环境
硬件 dell chengming_3901 - -
运行在以下环境
硬件 dell chengming_3910 - -
运行在以下环境
硬件 dell chengming_3911 - -
运行在以下环境
硬件 dell g15_5520 - -
运行在以下环境
硬件 dell g16_7620 - -
运行在以下环境
硬件 dell g3_3500 - -
运行在以下环境
硬件 dell g5_15_5500 - -
运行在以下环境
硬件 dell g7_15_7500 - -
运行在以下环境
硬件 dell g7_17_7700 - -
运行在以下环境
硬件 dell inspiron_14_5410 - -
运行在以下环境
硬件 dell inspiron_14_5418 - -
运行在以下环境
硬件 dell inspiron_15_3511 - -
运行在以下环境
硬件 dell inspiron_15_5510 - -
运行在以下环境
硬件 dell inspiron_15_5518 - -
运行在以下环境
硬件 dell inspiron_24_5420_all-in-one - -
运行在以下环境
硬件 dell inspiron_24_5421_all-in-one - -
运行在以下环境
硬件 dell inspiron_27_7720_all-in-one - -
运行在以下环境
硬件 dell inspiron_3020_desktop - -
运行在以下环境
硬件 dell inspiron_3020_small_desktop - -
运行在以下环境
硬件 dell inspiron_3493 - -
运行在以下环境
硬件 dell inspiron_3511 - -
运行在以下环境
硬件 dell inspiron_3593 - -
运行在以下环境
硬件 dell inspiron_3793 - -
运行在以下环境
硬件 dell inspiron_3891 - -
运行在以下环境
硬件 dell inspiron_3910 - -
运行在以下环境
硬件 dell inspiron_5410 - -
运行在以下环境
硬件 dell inspiron_5493 - -
运行在以下环境
硬件 dell inspiron_5593 - -
运行在以下环境
硬件 dell inspiron_7300_2-in-1 - -
运行在以下环境
硬件 dell inspiron_7490 - -
运行在以下环境
硬件 dell inspiron_7500 - -
运行在以下环境
硬件 dell inspiron_7500_2-in-1_black - -
运行在以下环境
硬件 dell inspiron_7501 - -
运行在以下环境
硬件 dell inspiron_7510 - -
运行在以下环境
硬件 dell inspiron_7610 - -
运行在以下环境
硬件 dell latitude_3140 - -
运行在以下环境
硬件 dell latitude_3301 - -
运行在以下环境
硬件 dell latitude_3320 - -
运行在以下环境
硬件 dell latitude_3330 - -
运行在以下环境
硬件 dell latitude_3340 - -
运行在以下环境
硬件 dell latitude_3400 - -
运行在以下环境
硬件 dell latitude_3430 - -
运行在以下环境
硬件 dell latitude_3440 - -
运行在以下环境
硬件 dell latitude_3500 - -
运行在以下环境
硬件 dell latitude_3530 - -
运行在以下环境
硬件 dell latitude_3540 - -
运行在以下环境
硬件 dell latitude_5420 - -
运行在以下环境
硬件 dell latitude_5430 - -
运行在以下环境
硬件 dell latitude_5431 - -
运行在以下环境
硬件 dell latitude_7230_rugged_extreme_tablet - -
运行在以下环境
硬件 dell latitude_7320 - -
运行在以下环境
硬件 dell latitude_7420 - -
运行在以下环境
硬件 dell latitude_7520 - -
运行在以下环境
硬件 dell latitude_9330 - -
运行在以下环境
硬件 dell latitude_9520 - -
运行在以下环境
硬件 dell latitude_rugged_5430 - -
运行在以下环境
硬件 dell latitude_rugged_7330 - -
运行在以下环境
硬件 dell optiplex_3000 - -
运行在以下环境
硬件 dell optiplex_3000_thin_client - -
运行在以下环境
硬件 dell optiplex_5000 - -
运行在以下环境
硬件 dell optiplex_5090 - -
运行在以下环境
硬件 dell optiplex_5400_all-in-one - -
运行在以下环境
硬件 dell optiplex_5490_all-in-one - -
运行在以下环境
硬件 dell optiplex_7000 - -
运行在以下环境
硬件 dell optiplex_7090 - -
运行在以下环境
硬件 dell optiplex_7400_all-in-one - -
运行在以下环境
硬件 dell optiplex_7410_all-in-one - -
运行在以下环境
硬件 dell optiplex_7490_all-in-one - -
运行在以下环境
硬件 dell optiplex_micro_plus_7010 - -
运行在以下环境
硬件 dell optiplex_small_form_factor_plus_7010 - -
运行在以下环境
硬件 dell optiplex_tower_plus_7010 - -
运行在以下环境
硬件 dell optiplex_xe4 - -
运行在以下环境
硬件 dell precision_3260_compact - -
运行在以下环境
硬件 dell precision_3260_xe_compact - -
运行在以下环境
硬件 dell precision_3450 - -
运行在以下环境
硬件 dell precision_3460_small_form_factor - -
运行在以下环境
硬件 dell precision_3460_xe_small_form_factor - -
运行在以下环境
硬件 dell precision_3470 - -
运行在以下环境
硬件 dell precision_3650_tower - -
运行在以下环境
硬件 dell precision_3660 - -
运行在以下环境
硬件 dell precision_5470 - -
运行在以下环境
硬件 dell precision_5570 - -
运行在以下环境
硬件 dell precision_5680 - -
运行在以下环境
硬件 dell precision_5860_tower - -
运行在以下环境
硬件 dell precision_7960_tower - -
运行在以下环境
硬件 dell vostro_3020_sff - -
运行在以下环境
硬件 dell vostro_3020_t - -
运行在以下环境
硬件 dell vostro_3510 - -
运行在以下环境
硬件 dell vostro_3690 - -
运行在以下环境
硬件 dell vostro_3710 - -
运行在以下环境
硬件 dell vostro_3890 - -
运行在以下环境
硬件 dell vostro_3910 - -
运行在以下环境
硬件 dell vostro_5410 - -
运行在以下环境
硬件 dell vostro_5491 - -
运行在以下环境
硬件 dell vostro_5510 - -
运行在以下环境
硬件 dell vostro_5591 - -
运行在以下环境
硬件 dell vostro_5890 - -
运行在以下环境
硬件 dell vostro_7500 - -
运行在以下环境
硬件 dell vostro_7510 - -
运行在以下环境
硬件 dell xps_13_7390 - -
运行在以下环境
硬件 dell xps_13_7390_2-in-1 - -
运行在以下环境
硬件 dell xps_13_9300 - -
运行在以下环境
硬件 dell xps_13_9305 - -
运行在以下环境
硬件 dell xps_13_9310 - -
运行在以下环境
硬件 dell xps_13_9310_2-in-1 - -
运行在以下环境
硬件 dell xps_13_9315 - -
运行在以下环境
硬件 dell xps_15_9520 - -
CVSS3评分
3.9
  • 攻击路径
    物理
  • 攻击复杂度
    低
  • 权限要求
    高
  • 影响范围
    未更改
  • 用户交互
    无
  • 可用性
    无
  • 保密性
    无
  • 完整性
    高
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CWE-ID 漏洞类型
CWE-287 认证机制不恰当
阿里云安全产品覆盖情况