Alienware M15 R7 Firmware CVE-2023-28075

MEDIUM

Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

2023-08-16 security_alert@emc.com

RCE Dell Alienware M15 R7 Firmware Alienware M16 Firmware Alienware M18 Firmware Chengming 3900 Firmware Chengming 3901 Firmware Chengming 3910 Firmware Chengming 3911 Firmware Chengming 3980 Firmware Chengming 3990 Firmware Chengming 3991 Firmware G15 5520 Firmware G16 7620 Firmware G3 3500 Firmware G5 15 5500 Firmware G5 15 5590 Firmware G7 15 7500 Firmware G7 15 7590 Firmware G7 17 7700 Firmware G7 17 7790 Firmware Precision 5680 Firmware Precision 5820 Tower Firmware Precision 7820 Tower Firmware Precision 7920 Tower Firmware Edge Gateway 3000 Firmware Edge Gateway 5000 Firmware Embedded Box Pc 3000 Firmware Embedded Box Pc 5000 Firmware Inspiron 14 5410 Firmware Inspiron 14 5418 Firmware Inspiron 15 3511 Firmware Inspiron 15 5510 Firmware Inspiron 15 5518 Firmware Inspiron 24 5420 All In One Firmware Inspiron 24 5421 All In One Firmware Inspiron 27 7720 All In One Firmware Inspiron 3020 Small Desktop Firmware Inspiron 3020 Desktop Firmware Inspiron 3470 Firmware Inspiron 3480 Firmware Inspiron 3481 Firmware Inspiron 3493 Firmware Inspiron 3511 Firmware Inspiron 3580 Firmware Inspiron 3581 Firmware Inspiron 3583 Firmware Inspiron 3584 Firmware Inspiron 3593 Firmware Inspiron 3670 Firmware Inspiron 3780 Firmware Inspiron 3781 Firmware Inspiron 3793 Firmware Inspiron 3880 Firmware Inspiron 3881 Firmware Inspiron 3891 Firmware Inspiron 3910 Firmware Inspiron 5400 Firmware Inspiron 5401 Aio Firmware Inspiron 5410 Firmware Inspiron 5490 Aio Firmware Inspiron 5493 Firmware Inspiron 5593 Firmware Inspiron 7300 2 In 1 Firmware Inspiron 7490 Firmware Inspiron 7500 Firmware Inspiron 7500 2 In 1 Black Firmware Inspiron 7501 Firmware Inspiron 7510 Firmware Inspiron 7590 Firmware Inspiron 7591 Firmware Inspiron 7610 Firmware Inspiron 7700 All In One Firmware Inspiron 7790 Firmware Inspiron 5491 Aio Firmware Latitude 3120 Firmware Latitude 3140 Firmware Latitude 3180 Firmware Latitude 3189 Firmware Latitude 3190 Firmware Latitude 3190 2 In 1 Firmware Latitude 3301 Firmware Latitude 3310 Firmware Latitude 3310 2 In 1 Firmware Latitude 3320 Firmware Latitude 3330 Firmware Latitude 3340 Firmware Latitude 3400 Firmware Latitude 3430 Firmware Latitude 3440 Firmware Latitude 3500 Firmware Latitude 3530 Firmware Latitude 3540 Firmware Latitude 5280 Firmware Latitude 5285 2 In 1 Firmware Latitude 5288 Firmware Latitude 5290 2 In 1 Firmware Latitude 5300 Firmware Latitude 5300 2 In 1 Firmware Latitude 5310 Firmware Latitude 5310 2 In 1 Firmware Latitude 5400 Firmware Latitude 5411 Firmware Latitude 5420 Firmware Latitude 5420 Rugged Firmware Latitude 5424 Rugged Firmware Latitude 5430 Firmware Latitude 5431 Firmware Latitude 5480 Firmware Latitude 5488 Firmware Latitude 5500 Firmware Latitude 5511 Firmware Latitude 5580 Firmware Latitude 7200 2 In 1 Firmware Latitude 7210 2 In 1 Firmware Latitude 7230 Rugged Extreme Tablet Firmware Latitude 7280 Firmware Latitude 7285 2 In 1 Firmware Latitude 7290 Firmware Latitude 7300 Firmware Latitude 7310 Firmware Latitude 7320 Firmware Latitude 7380 Firmware Latitude 7390 Firmware Latitude 7390 2 In 1 Firmware Latitude 7400 Firmware Latitude 7400 2 In 1 Firmware Latitude 7410 Firmware Latitude 7420 Firmware Latitude 7424 Rugged Extreme Firmware Latitude 7480 Firmware Latitude 7490 Firmware Latitude 7520 Firmware Latitude 9330 Firmware Latitude 9410 Firmware Latitude 9510 Firmware Latitude 9520 Firmware Latitude Rugged 5430 Firmware Latitude Rugged 7220 Firmware Latitude Rugged 7220Ex Firmware Latitude Rugged 7330 Firmware Optiplex 3000 Firmware Optiplex 3000 Thin Client Firmware Optiplex 3050 All In One Firmware Optiplex 3090 Firmware Optiplex 3280 All In One Firmware Optiplex 5000 Firmware Optiplex 5090 Firmware Optiplex 5250 Firmware Optiplex 5260 All In One Firmware Optiplex 5270 All In One Firmware Optiplex 5400 All In One Firmware Optiplex 5480 All In One Firmware Optiplex 5490 All In One Firmware Optiplex 7000 Firmware Optiplex 7060 Firmware Optiplex 7070 Firmware Optiplex 7070 Ultra Firmware Optiplex 7080 Firmware Optiplex 7090 Firmware Optiplex 7400 All In One Firmware Optiplex 7450 Firmware Optiplex 7460 All In One Firmware Optiplex 7470 All In One Firmware Optiplex 7480 All In One Firmware Optiplex 7490 All In One Firmware Optiplex 7760 All In One Firmware Optiplex 7770 All In One Firmware Optiplex 7780 All In One Firmware Optiplex 7410 All In One Firmware Optiplex Micro Plus 7010 Firmware Optiplex Small Form Factor Plus 7010 Firmware Optiplex Tower Plus 7010 Firmware Optiplex Xe4 Firmware Precision 3240 Compact Firmware Precision 3260 Xe Compact Firmware Precision 3260 Compact Firmware Precision 3450 Firmware Precision 3460 Xe Small Form Factor Firmware Precision 3460 Small Form Factor Firmware Precision 3470 Firmware Precision 3520 Firmware Precision 3540 Firmware Precision 3551 Firmware Precision 3630 Tower Firmware Precision 3640 Tower Firmware Precision 3650 Tower Firmware Precision 3660 Firmware Precision 3930 Rack Firmware Precision 5470 Firmware Precision 5520 Firmware Precision 5530 Firmware Precision 5530 2 In 1 Firmware Precision 5540 Firmware Precision 5570 Firmware Precision 5720 Aio Firmware Precision 5860 Tower Firmware Precision 7520 Firmware Precision 7540 Firmware Precision 7550 Firmware Precision 7720 Firmware Precision 7740 Firmware Precision 7750 Firmware Precision 7960 Tower Firmware Vostro 3020 Sff Firmware Vostro 3020 T Firmware Vostro 3070 Firmware Vostro 3470 Firmware Vostro 3480 Firmware Vostro 3481 Firmware Vostro 3510 Firmware Vostro 3580 Firmware Vostro 3581 Firmware Vostro 3583 Firmware Vostro 3584 Firmware Vostro 3670 Firmware Vostro 3681 Firmware Vostro 3690 Firmware Vostro 3710 Firmware Vostro 3881 Firmware Vostro 3888 Firmware Vostro 3890 Firmware Vostro 3910 Firmware Vostro 5410 Firmware Vostro 5491 Firmware Vostro 5510 Firmware Vostro 5591 Firmware Vostro 5890 Firmware Vostro 7500 Firmware Vostro 7510 Firmware Vostro 7590 Firmware Wyse 5470 Firmware Wyse 5470 All In One Firmware Xps 13 9305 Firmware Xps 13 7390 Firmware Xps 13 7390 2 In 1 Firmware Xps 13 9300 Firmware Xps 13 9310 Firmware Xps 13 9310 2 In 1 Firmware Xps 13 9315 Firmware Xps 13 9380 Firmware Xps 15 7590 Firmware Xps 15 9520 Firmware Xps 15 9575 2 In 1 Firmware

6.3

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

6.3 MEDIUM

AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Physical

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Aug 16, 2023 - 20:15 nvd

MEDIUM 6.3

DescriptionNVD

Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.

AnalysisAI

Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. Rated medium severity (CVSS 6.3). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-367. Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system. Affected products include: Dell Alienware M15 R7 Firmware, Dell Alienware M16 Firmware, Dell Alienware M18 Firmware, Dell Chengming 3900 Firmware, Dell Chengming 3901 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Alienware M15 R7 Firmware

View all

CVE-2024-52541 HIGH This Week

Dell Client Platform BIOS contains a Weak Authentication vulnerability. Rated high severity (CVSS 8.2), this vulnerabili

CVE-2025-29988 MEDIUM This Month

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. Rated medium severity (CVSS 6.9), this v

CVE-2023-32480 MEDIUM This Month

Dell BIOS contains an Improper Input Validation vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is n

CVE-2024-0158 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28060 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28058 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28050 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28044 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28036 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28034 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28031 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28027 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

Same weakness CWE-367 – Time-of-check Time-of-use (TOCTOU) Race Condition

View all

CVE-2024-30088 HIGH POC

CVE-2025-22224 CRITICAL

CVE-2022-48618 HIGH

CVE-2023-38146 HIGH POC

CVE-2025-34027 CRITICAL POC

CVE-2020-1337 HIGH POC

CVE-2026-25641 CRITICAL POC

CVE-2024-28718 CRITICAL POC

Same technique RCE

View all

CVE-2017-7269 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2016-4117 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2025-53770 CRITICAL POC

CVE-2020-7961 CRITICAL POC

Share

CVE-2023-28075 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy