Vulnerability Description
Dell BIOS contains an improper authentication vulnerability. A locally authenticated malicious user may potentially exploit this vulnerability by bypassing certain authentication mechanisms in order to elevate privileges on the system.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Precision 3570 Firmware | < 1.13.2 |
| Dell | Precision 3570 | - |
| Dell | Latitude 5530 Firmware | < 1.13.2 |
| Dell | Latitude 5530 | - |
Related Weaknesses (CWE)
References
- https://www.dell.com/support/kbdoc/en-us/000213032/dsa-2023-160-dell-clientVendor Advisory
- https://www.dell.com/support/kbdoc/en-us/000213032/dsa-2023-160-dell-clientVendor Advisory
FAQ
What is CVE-2023-28073?
CVE-2023-28073 is a vulnerability with a CVSS score of 8.2 (HIGH). Dell BIOS contains an improper authentication vulnerability. A locally authenticated malicious user may potentially exploit this vulnerability by bypassing certain authentication mechanisms in order ...
How severe is CVE-2023-28073?
CVE-2023-28073 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-28073?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Precision 3570 Firmware, Dell Precision 3570, Dell Latitude 5530 Firmware, Dell Latitude 5530.