MEDIUM · 6.7

CVE-2023-39251

Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.

Vulnerability Description

Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
DellInspiron 7510 Firmware< 1.20.0
DellInspiron 7510-
DellInspiron 7610 Firmware< 1.20.0
DellInspiron 7610-
DellLatitude 5430 Rugged Firmware< 1.23.0
DellLatitude 5430 Rugged-
DellLatitude 5521 Firmware< 1.27.0
DellLatitude 5521-
DellLatitude 7330 Rugged Firmware< 1.23.0
DellLatitude 7330 Rugged-
DellPrecision 3561 Firmware< 1.27.0
DellPrecision 3561-
DellPrecision 5560 Firmware< 1.25.0
DellPrecision 5560-
DellPrecision 5760 Firmware< 1.24.0
DellPrecision 5760-
DellPrecision 7560 Firmware< 1.27.0
DellPrecision 7560-
DellPrecision 7760 Firmware< 1.27.0
DellPrecision 7760-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2023-39251?

CVE-2023-39251 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.

How severe is CVE-2023-39251?

CVE-2023-39251 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-39251?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Inspiron 7510 Firmware, Dell Inspiron 7510, Dell Inspiron 7610 Firmware, Dell Inspiron 7610, Dell Latitude 5430 Rugged Firmware.