{"answers":{"affected":"It affects 434 products.","exploited":"There is no known exploitation of CVE-2023-28059 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2023-28059 yet. Limit exposure of the affected software until one is available.","what":"CVE-2023-28059 is a medium-severity missing authorization vulnerability in Dell Alienware Area 51m R2 Firmware, published on 23 Jun 2023. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2023-28059 and fix it if it is affected.\n\nWhat it is: CVE-2023-28059 is a medium-severity missing authorization vulnerability in Dell Alienware Area 51m R2 Firmware, published on 23 Jun 2023. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2023-28059 in the wild and no public exploit code.\n\nAffected product: Dell Alienware Area 51m R2 Firmware. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2023-28059/ (Markdown: https://insights.sbomify.com/CVE-2023-28059/index.md)","id":"CVE-2023-28059","markdown":"https://insights.sbomify.com/CVE-2023-28059/index.md","name":"CVE-2023-28059","record":{"aliases":["GHSA-57r6-fw45-7rgv"],"analysis":{"component_type":"hardware_firmware","fix_type":"patch","impacts":["data_modify"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Dell BIOS","requires_auth":"high_privilege","summary":"A local authenticated administrator can modify UEFI variables in Dell BIOS due to improper input validation.","user_interaction":"not_required","vuln_class":"missing_authorization"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"dell","cpe":[{"product":"alienware_area_51m_r1_firmware","vendor":"dell"},{"product":"alienware_area_51m_r2_firmware","vendor":"dell"},{"product":"alienware_aurora_r11_firmware","vendor":"dell"},{"product":"alienware_aurora_r12_firmware","vendor":"dell"},{"product":"alienware_aurora_r13_firmware","vendor":"dell"},{"product":"alienware_aurora_r15_firmware","vendor":"dell"},{"product":"alienware_m15_r2_firmware","vendor":"dell"},{"product":"alienware_m15_r3_firmware","vendor":"dell"},{"product":"alienware_m15_r4_firmware","vendor":"dell"},{"product":"alienware_m15_r6_firmware","vendor":"dell"},{"product":"alienware_m15_r7_firmware","vendor":"dell"},{"product":"alienware_m16_firmware","vendor":"dell"},{"product":"alienware_m17_r2_firmware","vendor":"dell"},{"product":"alienware_m17_r3_firmware","vendor":"dell"},{"product":"alienware_m17_r4_firmware","vendor":"dell"},{"product":"alienware_x14_firmware","vendor":"dell"},{"product":"alienware_x15_r1_firmware","vendor":"dell"},{"product":"alienware_x15_r2_firmware","vendor":"dell"},{"product":"alienware_x17_r1_firmware","vendor":"dell"},{"product":"alienware_x17_r2_firmware","vendor":"dell"},{"product":"chengming_3900_firmware","vendor":"dell"},{"product":"chengming_3901_firmware","vendor":"dell"},{"product":"chengming_3910_firmware","vendor":"dell"},{"product":"chengming_3911_firmware","vendor":"dell"},{"product":"chengming_3980_firmware","vendor":"dell"},{"product":"chengming_3988_firmware","vendor":"dell"},{"product":"chengming_3990_firmware","vendor":"dell"},{"product":"chengming_3991_firmware","vendor":"dell"},{"product":"embedded_box_pc_5000_firmware","vendor":"dell"},{"product":"g15_5510_firmware","vendor":"dell"},{"product":"g15_5511_firmware","vendor":"dell"},{"product":"g15_5520_firmware","vendor":"dell"},{"product":"g15_5530_firmware","vendor":"dell"},{"product":"g16_7620_firmware","vendor":"dell"},{"product":"g3_15_3590_firmware","vendor":"dell"},{"product":"g3_3500_firmware","vendor":"dell"},{"product":"g3_3579_firmware","vendor":"dell"},{"product":"g3_3779_firmware","vendor":"dell"},{"product":"g5_15_5500_firmware","vendor":"dell"},{"product":"g5_15_5590_firmware","vendor":"dell"},{"product":"g5_5000_firmware","vendor":"dell"},{"product":"g5_5090_firmware","vendor":"dell"},{"product":"g7_15_7500_firmware","vendor":"dell"},{"product":"g7_15_7590_firmware","vendor":"dell"},{"product":"g7_17_7700_firmware","vendor":"dell"},{"product":"g7_17_7790_firmware","vendor":"dell"},{"product":"inspiron_13_5330_firmware","vendor":"dell"},{"product":"inspiron_14_5410_firmware","vendor":"dell"},{"product":"inspiron_14_5418_firmware","vendor":"dell"},{"product":"inspiron_14_5430_firmware","vendor":"dell"},{"product":"inspiron_14_7430_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_14_plus_7420_firmware","vendor":"dell"},{"product":"inspiron_15_3511_firmware","vendor":"dell"},{"product":"inspiron_15_5510_firmware","vendor":"dell"},{"product":"inspiron_15_5518_firmware","vendor":"dell"},{"product":"inspiron_16_5630_firmware","vendor":"dell"},{"product":"inspiron_16_7620_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_16_7630_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_16_plus_7620_firmware","vendor":"dell"},{"product":"inspiron_24_5410_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_24_5420_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_24_5421_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_27_7720_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_3020_firmware","vendor":"dell"},{"product":"inspiron_3020s_firmware","vendor":"dell"},{"product":"inspiron_3280_firmware","vendor":"dell"},{"product":"inspiron_3470_firmware","vendor":"dell"},{"product":"inspiron_3471_firmware","vendor":"dell"},{"product":"inspiron_3480_firmware","vendor":"dell"},{"product":"inspiron_3481_firmware","vendor":"dell"},{"product":"inspiron_3482_firmware","vendor":"dell"},{"product":"inspiron_3490_firmware","vendor":"dell"},{"product":"inspiron_3493_firmware","vendor":"dell"},{"product":"inspiron_3501_firmware","vendor":"dell"},{"product":"inspiron_3502_firmware","vendor":"dell"},{"product":"inspiron_3510_firmware","vendor":"dell"},{"product":"inspiron_3511_firmware","vendor":"dell"},{"product":"inspiron_3520_firmware","vendor":"dell"},{"product":"inspiron_3521_firmware","vendor":"dell"},{"product":"inspiron_3580_firmware","vendor":"dell"},{"product":"inspiron_3581_firmware","vendor":"dell"},{"product":"inspiron_3582_firmware","vendor":"dell"},{"product":"inspiron_3583_firmware","vendor":"dell"},{"product":"inspiron_3584_firmware","vendor":"dell"},{"product":"inspiron_3590_firmware","vendor":"dell"},{"product":"inspiron_3593_firmware","vendor":"dell"},{"product":"inspiron_3670_firmware","vendor":"dell"},{"product":"inspiron_3671_firmware","vendor":"dell"},{"product":"inspiron_3780_firmware","vendor":"dell"},{"product":"inspiron_3781_firmware","vendor":"dell"},{"product":"inspiron_3782_firmware","vendor":"dell"},{"product":"inspiron_3790_firmware","vendor":"dell"},{"product":"inspiron_3793_firmware","vendor":"dell"},{"product":"inspiron_3880_firmware","vendor":"dell"},{"product":"inspiron_3881_firmware","vendor":"dell"},{"product":"inspiron_3891_firmware","vendor":"dell"},{"product":"inspiron_3910_firmware","vendor":"dell"},{"product":"inspiron_5300_firmware","vendor":"dell"},{"product":"inspiron_5301_firmware","vendor":"dell"},{"product":"inspiron_5310_firmware","vendor":"dell"},{"product":"inspiron_5320_firmware","vendor":"dell"},{"product":"inspiron_5391_firmware","vendor":"dell"},{"product":"inspiron_5400_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_5400_firmware","vendor":"dell"},{"product":"inspiron_5401_aio_firmware","vendor":"dell"},{"product":"inspiron_5401_firmware","vendor":"dell"},{"product":"inspiron_5402_firmware","vendor":"dell"},{"product":"inspiron_5406_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_5408_firmware","vendor":"dell"},{"product":"inspiron_5409_firmware","vendor":"dell"},{"product":"inspiron_5410_firmware","vendor":"dell"},{"product":"inspiron_5420_firmware","vendor":"dell"},{"product":"inspiron_5481_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_5490_aio_firmware","vendor":"dell"},{"product":"inspiron_5490_firmware","vendor":"dell"},{"product":"inspiron_5491_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_5491_aio_firmware","vendor":"dell"},{"product":"inspiron_5493_firmware","vendor":"dell"},{"product":"inspiron_5494_firmware","vendor":"dell"},{"product":"inspiron_5498_firmware","vendor":"dell"},{"product":"inspiron_5501_firmware","vendor":"dell"},{"product":"inspiron_5502_firmware","vendor":"dell"},{"product":"inspiron_5508_firmware","vendor":"dell"},{"product":"inspiron_5509_firmware","vendor":"dell"},{"product":"inspiron_5570_firmware","vendor":"dell"},{"product":"inspiron_5590_firmware","vendor":"dell"},{"product":"inspiron_5591_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_5593_firmware","vendor":"dell"},{"product":"inspiron_5594_firmware","vendor":"dell"},{"product":"inspiron_5598_firmware","vendor":"dell"},{"product":"inspiron_5620_firmware","vendor":"dell"},{"product":"inspiron_5770_firmware","vendor":"dell"},{"product":"inspiron_7000_firmware","vendor":"dell"},{"product":"inspiron_7300_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_7300_firmware","vendor":"dell"},{"product":"inspiron_7306_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_7391_firmware","vendor":"dell"},{"product":"inspiron_7400_firmware","vendor":"dell"},{"product":"inspiron_7420_firmware","vendor":"dell"},{"product":"inspiron_7490_firmware","vendor":"dell"},{"product":"inspiron_7500_2-in-1_black_firmware","vendor":"dell"},{"product":"inspiron_7500_2-in-1_silver_firmware","vendor":"dell"},{"product":"inspiron_7500_firmware","vendor":"dell"},{"product":"inspiron_7501_firmware","vendor":"dell"},{"product":"inspiron_7506_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_7510_firmware","vendor":"dell"},{"product":"inspiron_7590_firmware","vendor":"dell"},{"product":"inspiron_7591_firmware","vendor":"dell"},{"product":"inspiron_7610_firmware","vendor":"dell"},{"product":"inspiron_7700_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_7706_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_7710_firmware","vendor":"dell"},{"product":"inspiron_7790_firmware","vendor":"dell"},{"product":"inspiron_7791_firmware","vendor":"dell"},{"product":"latitude_12_rugged_extreme_7214_firmware","vendor":"dell"},{"product":"latitude_13_3380_firmware","vendor":"dell"},{"product":"latitude_14_rugged_5414_firmware","vendor":"dell"},{"product":"latitude_3120_firmware","vendor":"dell"},{"product":"latitude_3140_firmware","vendor":"dell"},{"product":"latitude_3180_firmware","vendor":"dell"},{"product":"latitude_3189_firmware","vendor":"dell"},{"product":"latitude_3190_2-in-1_firmware","vendor":"dell"},{"product":"latitude_3190_firmware","vendor":"dell"},{"product":"latitude_3300_firmware","vendor":"dell"},{"product":"latitude_3301_firmware","vendor":"dell"},{"product":"latitude_3310_2-in-1_firmware","vendor":"dell"},{"product":"latitude_3310_firmware","vendor":"dell"},{"product":"latitude_3320_firmware","vendor":"dell"},{"product":"latitude_3330_firmware","vendor":"dell"},{"product":"latitude_3390_2-in-1_firmware","vendor":"dell"},{"product":"latitude_3400_firmware","vendor":"dell"},{"product":"latitude_3410_firmware","vendor":"dell"},{"product":"latitude_3420_firmware","vendor":"dell"},{"product":"latitude_3430_firmware","vendor":"dell"},{"product":"latitude_3480_firmware","vendor":"dell"},{"product":"latitude_3490_firmware","vendor":"dell"},{"product":"latitude_3500_firmware","vendor":"dell"},{"product":"latitude_3510_firmware","vendor":"dell"},{"product":"latitude_3520_firmware","vendor":"dell"},{"product":"latitude_3530_firmware","vendor":"dell"},{"product":"latitude_3580_firmware","vendor":"dell"},{"product":"latitude_3590_firmware","vendor":"dell"},{"product":"latitude_5280_firmware","vendor":"dell"},{"product":"latitude_5285_2-in-1_firmware","vendor":"dell"},{"product":"latitude_5288_firmware","vendor":"dell"},{"product":"latitude_5289_firmware","vendor":"dell"},{"product":"latitude_5290_2-in-1_firmware","vendor":"dell"},{"product":"latitude_5290_firmware","vendor":"dell"},{"product":"latitude_5300_2-in-1_firmware","vendor":"dell"},{"product":"latitude_5300_firmware","vendor":"dell"},{"product":"latitude_5310_2-in-1_firmware","vendor":"dell"},{"product":"latitude_5310_firmware","vendor":"dell"},{"product":"latitude_5320_firmware","vendor":"dell"},{"product":"latitude_5330_firmware","vendor":"dell"},{"product":"latitude_5400_firmware","vendor":"dell"},{"product":"latitude_5401_firmware","vendor":"dell"},{"product":"latitude_5410_firmware","vendor":"dell"},{"product":"latitude_5411_firmware","vendor":"dell"},{"product":"latitude_5420_firmware","vendor":"dell"},{"product":"latitude_5420_rugged_firmware","vendor":"dell"},{"product":"latitude_5421_firmware","vendor":"dell"},{"product":"latitude_5424_rugged_firmware","vendor":"dell"},{"product":"latitude_5430_firmware","vendor":"dell"},{"product":"latitude_5480_firmware","vendor":"dell"},{"product":"latitude_5488_firmware","vendor":"dell"},{"product":"latitude_5490_firmware","vendor":"dell"},{"product":"latitude_5491_firmware","vendor":"dell"},{"product":"latitude_5500_firmware","vendor":"dell"},{"product":"latitude_5501_firmware","vendor":"dell"},{"product":"latitude_5510_firmware","vendor":"dell"},{"product":"latitude_5511_firmware","vendor":"dell"},{"product":"latitude_5520_firmware","vendor":"dell"},{"product":"latitude_5521_firmware","vendor":"dell"},{"product":"latitude_5530_firmware","vendor":"dell"},{"product":"latitude_5531_firmware","vendor":"dell"},{"product":"latitude_5580_firmware","vendor":"dell"},{"product":"latitude_5590_firmware","vendor":"dell"},{"product":"latitude_5591_firmware","vendor":"dell"},{"product":"latitude_7200_2-in-1_firmware","vendor":"dell"},{"product":"latitude_7210_2-in-1_firmware","vendor":"dell"},{"product":"latitude_7212_rugged_extreme_tablet_firmware","vendor":"dell"},{"product":"latitude_7230_rugged_extreme_tablet_firmware","vendor":"dell"},{"product":"latitude_7280_firmware","vendor":"dell"},{"product":"latitude_7285_2-in-1_firmware","vendor":"dell"},{"product":"latitude_7290_firmware","vendor":"dell"},{"product":"latitude_7300_firmware","vendor":"dell"},{"product":"latitude_7310_firmware","vendor":"dell"},{"product":"latitude_7320_detachable_firmware","vendor":"dell"},{"product":"latitude_7330_firmware","vendor":"dell"},{"product":"latitude_7380_firmware","vendor":"dell"},{"product":"latitude_7389_firmware","vendor":"dell"},{"product":"latitude_7390_2-in-1_firmware","vendor":"dell"},{"product":"latitude_7390_firmware","vendor":"dell"},{"product":"latitude_7400_2-in-1_firmware","vendor":"dell"},{"product":"latitude_7400_firmware","vendor":"dell"},{"product":"latitude_7410_firmware","vendor":"dell"},{"product":"latitude_7414_rugged_extreme_firmware","vendor":"dell"},{"product":"latitude_7424_rugged_extreme_firmware","vendor":"dell"},{"product":"latitude_7430_firmware","vendor":"dell"},{"product":"latitude_7480_firmware","vendor":"dell"},{"product":"latitude_7490_firmware","vendor":"dell"},{"product":"latitude_7530_firmware","vendor":"dell"},{"product":"latitude_9330_firmware","vendor":"dell"},{"product":"latitude_9410_firmware","vendor":"dell"},{"product":"latitude_9420_firmware","vendor":"dell"},{"product":"latitude_9430_firmware","vendor":"dell"},{"product":"latitude_9510_firmware","vendor":"dell"},{"product":"latitude_9520_firmware","vendor":"dell"},{"product":"latitude_rugged_5430_firmware","vendor":"dell"},{"product":"latitude_rugged_7220_firmware","vendor":"dell"},{"product":"latitude_rugged_7220ex_firmware","vendor":"dell"},{"product":"latitude_rugged_7330_firmware","vendor":"dell"},{"product":"optiplex_3000_firmware","vendor":"dell"},{"product":"optiplex_3000_thin_client_firmware","vendor":"dell"},{"product":"optiplex_3050_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_3050_firmware","vendor":"dell"},{"product":"optiplex_3060_firmware","vendor":"dell"},{"product":"optiplex_3070_firmware","vendor":"dell"},{"product":"optiplex_3080_firmware","vendor":"dell"},{"product":"optiplex_3090_firmware","vendor":"dell"},{"product":"optiplex_3090_ultra_firmware","vendor":"dell"},{"product":"optiplex_3280_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_5000_firmware","vendor":"dell"},{"product":"optiplex_5050_firmware","vendor":"dell"},{"product":"optiplex_5060_firmware","vendor":"dell"},{"product":"optiplex_5070_firmware","vendor":"dell"},{"product":"optiplex_5080_firmware","vendor":"dell"},{"product":"optiplex_5090_firmware","vendor":"dell"},{"product":"optiplex_5250_firmware","vendor":"dell"},{"product":"optiplex_5260_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_5270_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_5400_firmware","vendor":"dell"},{"product":"optiplex_5480_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_5490_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7000_firmware","vendor":"dell"},{"product":"optiplex_7000_oem_firmware","vendor":"dell"},{"product":"optiplex_7050_firmware","vendor":"dell"},{"product":"optiplex_7060_firmware","vendor":"dell"},{"product":"optiplex_7070_firmware","vendor":"dell"},{"product":"optiplex_7070_ultra_firmware","vendor":"dell"},{"product":"optiplex_7071_firmware","vendor":"dell"},{"product":"optiplex_7080_firmware","vendor":"dell"},{"product":"optiplex_7090_firmware","vendor":"dell"},{"product":"optiplex_7090_ultra_firmware","vendor":"dell"},{"product":"optiplex_7400_firmware","vendor":"dell"},{"product":"optiplex_7410_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7450_firmware","vendor":"dell"},{"product":"optiplex_7460_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7470_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7480_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7490_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7760_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7770_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7780_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_small_form_factor_plus_7010_firmware","vendor":"dell"},{"product":"optiplex_tower_plus_7010_firmware","vendor":"dell"},{"product":"optiplex_xe3_firmware","vendor":"dell"},{"product":"precision_3240_compact_firmware","vendor":"dell"},{"product":"precision_3420_tower_firmware","vendor":"dell"},{"product":"precision_3430_tower_firmware","vendor":"dell"},{"product":"precision_3431_tower_firmware","vendor":"dell"},{"product":"precision_3440_firmware","vendor":"dell"},{"product":"precision_3450_firmware","vendor":"dell"},{"product":"precision_3460_small_form_factor_firmware","vendor":"dell"},{"product":"precision_3520_firmware","vendor":"dell"},{"product":"precision_3530_firmware","vendor":"dell"},{"product":"precision_3540_firmware","vendor":"dell"},{"product":"precision_3541_firmware","vendor":"dell"},{"product":"precision_3550_firmware","vendor":"dell"},{"product":"precision_3551_firmware","vendor":"dell"},{"product":"precision_3560_firmware","vendor":"dell"},{"product":"precision_3561_firmware","vendor":"dell"},{"product":"precision_3570_firmware","vendor":"dell"},{"product":"precision_3571_firmware","vendor":"dell"},{"product":"precision_3620_tower_firmware","vendor":"dell"},{"product":"precision_3630_tower_firmware","vendor":"dell"},{"product":"precision_3640_tower_firmware","vendor":"dell"},{"product":"precision_3650_tower_firmware","vendor":"dell"},{"product":"precision_3660_firmware","vendor":"dell"},{"product":"precision_3930_rack_firmware","vendor":"dell"},{"product":"precision_5470_firmware","vendor":"dell"},{"product":"precision_5520_firmware","vendor":"dell"},{"product":"precision_5530_2-in-1_firmware","vendor":"dell"},{"product":"precision_5530_firmware","vendor":"dell"},{"product":"precision_5540_firmware","vendor":"dell"},{"product":"precision_5550_firmware","vendor":"dell"},{"product":"precision_5560_firmware","vendor":"dell"},{"product":"precision_5570_firmware","vendor":"dell"},{"product":"precision_5720_aio_firmware","vendor":"dell"},{"product":"precision_5750_firmware","vendor":"dell"},{"product":"precision_5760_firmware","vendor":"dell"},{"product":"precision_5770_firmware","vendor":"dell"},{"product":"precision_5820_tower_firmware","vendor":"dell"},{"product":"precision_7510_firmware","vendor":"dell"},{"product":"precision_7520_firmware","vendor":"dell"},{"product":"precision_7530_firmware","vendor":"dell"},{"product":"precision_7540_firmware","vendor":"dell"},{"product":"precision_7560_firmware","vendor":"dell"},{"product":"precision_7670_firmware","vendor":"dell"},{"product":"precision_7710_firmware","vendor":"dell"},{"product":"precision_7720_firmware","vendor":"dell"},{"product":"precision_7730_firmware","vendor":"dell"},{"product":"precision_7740_firmware","vendor":"dell"},{"product":"precision_7760_firmware","vendor":"dell"},{"product":"precision_7770_firmware","vendor":"dell"},{"product":"precision_7820_tower_firmware","vendor":"dell"},{"product":"precision_7865_tower_firmware","vendor":"dell"},{"product":"precision_7920_tower_firmware","vendor":"dell"},{"product":"vostro_16_5630_firmware","vendor":"dell"},{"product":"vostro_3020_sff_firmware","vendor":"dell"},{"product":"vostro_3020_t_firmware","vendor":"dell"},{"product":"vostro_3070_firmware","vendor":"dell"},{"product":"vostro_3267_firmware","vendor":"dell"},{"product":"vostro_3268_firmware","vendor":"dell"},{"product":"vostro_3400_firmware","vendor":"dell"},{"product":"vostro_3401_firmware","vendor":"dell"},{"product":"vostro_3420_firmware","vendor":"dell"},{"product":"vostro_3470_firmware","vendor":"dell"},{"product":"vostro_3471_firmware","vendor":"dell"},{"product":"vostro_3480_firmware","vendor":"dell"},{"product":"vostro_3481_firmware","vendor":"dell"},{"product":"vostro_3490_firmware","vendor":"dell"},{"product":"vostro_3500_firmware","vendor":"dell"},{"product":"vostro_3501_firmware","vendor":"dell"},{"product":"vostro_3510_firmware","vendor":"dell"},{"product":"vostro_3520_firmware","vendor":"dell"},{"product":"vostro_3580_firmware","vendor":"dell"},{"product":"vostro_3581_firmware","vendor":"dell"},{"product":"vostro_3582_firmware","vendor":"dell"},{"product":"vostro_3583_firmware","vendor":"dell"},{"product":"vostro_3584_firmware","vendor":"dell"},{"product":"vostro_3590_firmware","vendor":"dell"},{"product":"vostro_3667_firmware","vendor":"dell"},{"product":"vostro_3668_firmware","vendor":"dell"},{"product":"vostro_3669_firmware","vendor":"dell"},{"product":"vostro_3670_firmware","vendor":"dell"},{"product":"vostro_3671_firmware","vendor":"dell"},{"product":"vostro_3681_firmware","vendor":"dell"},{"product":"vostro_3690_firmware","vendor":"dell"},{"product":"vostro_3710_firmware","vendor":"dell"},{"product":"vostro_3881_firmware","vendor":"dell"},{"product":"vostro_3888_firmware","vendor":"dell"},{"product":"vostro_3890_firmware","vendor":"dell"},{"product":"vostro_3910_firmware","vendor":"dell"},{"product":"vostro_5090_firmware","vendor":"dell"},{"product":"vostro_5300_firmware","vendor":"dell"},{"product":"vostro_5301_firmware","vendor":"dell"},{"product":"vostro_5310_firmware","vendor":"dell"},{"product":"vostro_5320_firmware","vendor":"dell"},{"product":"vostro_5391_firmware","vendor":"dell"},{"product":"vostro_5401_firmware","vendor":"dell"},{"product":"vostro_5402_firmware","vendor":"dell"},{"product":"vostro_5410_firmware","vendor":"dell"},{"product":"vostro_5490_firmware","vendor":"dell"},{"product":"vostro_5491_firmware","vendor":"dell"},{"product":"vostro_5501_firmware","vendor":"dell"},{"product":"vostro_5502_firmware","vendor":"dell"},{"product":"vostro_5510_firmware","vendor":"dell"},{"product":"vostro_5590_firmware","vendor":"dell"},{"product":"vostro_5591_firmware","vendor":"dell"},{"product":"vostro_5620_firmware","vendor":"dell"},{"product":"vostro_5880_firmware","vendor":"dell"},{"product":"vostro_5890_firmware","vendor":"dell"},{"product":"vostro_7500_firmware","vendor":"dell"},{"product":"vostro_7510_firmware","vendor":"dell"},{"product":"vostro_7590_firmware","vendor":"dell"},{"product":"vostro_7620_firmware","vendor":"dell"},{"product":"wyse_5070_firmware","vendor":"dell"},{"product":"wyse_5470_all-in-one_firmware","vendor":"dell"},{"product":"wyse_5470_firmware","vendor":"dell"},{"product":"wyse_7040_thin_client_firmware","vendor":"dell"},{"product":"xps_13_7390_2-in-1_firmware","vendor":"dell"},{"product":"xps_13_7390_firmware","vendor":"dell"},{"product":"xps_13_9300_firmware","vendor":"dell"},{"product":"xps_13_9305_firmware","vendor":"dell"},{"product":"xps_13_9310_2-in-1_firmware","vendor":"dell"},{"product":"xps_13_9310_firmware","vendor":"dell"},{"product":"xps_13_9315_2-in-1_firmware","vendor":"dell"},{"product":"xps_13_9315_firmware","vendor":"dell"},{"product":"xps_13_9320_firmware","vendor":"dell"},{"product":"xps_13_9380_firmware","vendor":"dell"},{"product":"xps_15_7590_firmware","vendor":"dell"},{"product":"xps_15_9500_firmware","vendor":"dell"},{"product":"xps_15_9510_firmware","vendor":"dell"},{"product":"xps_15_9520_firmware","vendor":"dell"},{"product":"xps_15_9530_firmware","vendor":"dell"},{"product":"xps_15_9575_2-in-1_firmware","vendor":"dell"},{"product":"xps_17_9700_firmware","vendor":"dell"},{"product":"xps_17_9710_firmware","vendor":"dell"},{"product":"xps_17_9720_firmware","vendor":"dell"},{"product":"xps_17_9730_firmware","vendor":"dell"},{"product":"xps_8940_firmware","vendor":"dell"},{"product":"xps_8950_firmware","vendor":"dell"},{"product":"xps_8960_firmware","vendor":"dell"}],"cvss":{"score":5.1,"severity":"medium","source":"cna","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L","version":"3.1"},"cwes":[{"id":"CWE-20","name":"Improper Input Validation"}],"description":"Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Missing authorization in CPG BIOS","id":"CVE-2023-28059","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":"dell:alienware_area_51m_r2_firmware","products":["dell:alienware_area_51m_r2_firmware","dell:alienware_m15_r3_firmware","dell:alienware_m15_r4_firmware","dell:alienware_m17_r3_firmware","dell:alienware_m17_r4_firmware","dell:alienware_x15_r1_firmware","dell:alienware_x17_r1_firmware","dell:chengming_3980_firmware","dell:chengming_3990_firmware","dell:chengming_3991_firmware","dell:embedded_box_pc_5000_firmware","dell:g5_5000_firmware","dell:inspiron_3470_firmware","dell:inspiron_3480_firmware","dell:inspiron_3481_firmware","dell:inspiron_3493_firmware","dell:inspiron_3501_firmware","dell:inspiron_3580_firmware","dell:inspiron_3581_firmware","dell:inspiron_3593_firmware","dell:inspiron_3670_firmware","dell:inspiron_3780_firmware","dell:inspiron_3781_firmware","dell:inspiron_3793_firmware","dell:inspiron_3880_firmware","dell:inspiron_3881_firmware","dell:inspiron_3891_firmware","dell:inspiron_5400_firmware","dell:inspiron_5401_firmware","dell:inspiron_5490_firmware","dell:inspiron_5493_firmware","dell:inspiron_5593_firmware","dell:inspiron_7490_firmware","dell:inspiron_7500_firmware","dell:inspiron_7501_firmware","dell:inspiron_7590_firmware","dell:inspiron_7591_firmware","dell:inspiron_7610_firmware","dell:latitude_3120_firmware","dell:latitude_3180_firmware","dell:latitude_3189_firmware","dell:latitude_3190_2-in-1_firmware","dell:latitude_3190_firmware","dell:latitude_3300_firmware","dell:latitude_3301_firmware","dell:latitude_3310_2-in-1_firmware","dell:latitude_3310_firmware","dell:latitude_3320_firmware","dell:latitude_3420_firmware","dell:latitude_3490_firmware","dell:latitude_3520_firmware","dell:latitude_3590_firmware","dell:latitude_5280_firmware","dell:latitude_5290_2-in-1_firmware","dell:latitude_5290_firmware","dell:latitude_5300_2-in-1_firmware","dell:latitude_5300_firmware","dell:latitude_5310_2-in-1_firmware","dell:latitude_5310_firmware","dell:latitude_5320_firmware","dell:latitude_5400_firmware","dell:latitude_5401_firmware","dell:latitude_5410_firmware","dell:latitude_5411_firmware","dell:latitude_5420_firmware","dell:latitude_5420_rugged_firmware","dell:latitude_5480_firmware","dell:latitude_5488_firmware","dell:latitude_5490_firmware","dell:latitude_5491_firmware","dell:latitude_5500_firmware","dell:latitude_5501_firmware","dell:latitude_5510_firmware","dell:latitude_5511_firmware","dell:latitude_5520_firmware","dell:latitude_5521_firmware","dell:latitude_5580_firmware","dell:latitude_5590_firmware","dell:latitude_5591_firmware","dell:latitude_7200_2-in-1_firmware","dell:latitude_7210_2-in-1_firmware","dell:latitude_7212_rugged_extreme_tablet_firmware","dell:latitude_7290_firmware","dell:latitude_7300_firmware","dell:latitude_7310_firmware","dell:latitude_7320_detachable_firmware","dell:latitude_7380_firmware","dell:latitude_7390_2-in-1_firmware","dell:latitude_7390_firmware","dell:latitude_7400_2-in-1_firmware","dell:latitude_7400_firmware","dell:latitude_7410_firmware","dell:latitude_7424_rugged_extreme_firmware","dell:latitude_7480_firmware","dell:latitude_7490_firmware","dell:latitude_9410_firmware","dell:latitude_9420_firmware","dell:latitude_9510_firmware","dell:latitude_9520_firmware","dell:optiplex_3050_firmware","dell:optiplex_3060_firmware","dell:optiplex_3070_firmware","dell:optiplex_3080_firmware","dell:optiplex_5050_firmware","dell:optiplex_5060_firmware","dell:optiplex_5070_firmware","dell:optiplex_5080_firmware","dell:optiplex_5480_all-in-one_firmware","dell:optiplex_7060_firmware","dell:optiplex_7070_firmware","dell:optiplex_7071_firmware","dell:optiplex_7080_firmware","dell:optiplex_7480_all-in-one_firmware","dell:optiplex_xe3_firmware","dell:precision_3440_firmware","dell:precision_3450_firmware","dell:precision_3520_firmware","dell:precision_3530_firmware","dell:precision_3540_firmware","dell:precision_3541_firmware","dell:precision_3550_firmware","dell:precision_3551_firmware","dell:precision_3560_firmware","dell:precision_3561_firmware","dell:precision_3930_rack_firmware","dell:precision_5530_2-in-1_firmware","dell:precision_5530_firmware","dell:precision_5540_firmware","dell:precision_5550_firmware","dell:precision_5760_firmware","dell:precision_5820_tower_firmware","dell:precision_7520_firmware","dell:precision_7530_firmware","dell:precision_7540_firmware","dell:precision_7560_firmware","dell:precision_7720_firmware","dell:precision_7730_firmware","dell:precision_7740_firmware","dell:precision_7760_firmware","dell:vostro_3070_firmware","dell:vostro_3267_firmware","dell:vostro_3268_firmware","dell:vostro_3470_firmware","dell:vostro_3480_firmware","dell:vostro_3501_firmware","dell:vostro_3580_firmware","dell:vostro_3581_firmware","dell:vostro_3583_firmware","dell:vostro_3584_firmware","dell:vostro_3590_firmware","dell:vostro_3667_firmware","dell:vostro_3668_firmware","dell:vostro_3669_firmware","dell:vostro_3670_firmware","dell:vostro_3681_firmware","dell:vostro_3690_firmware","dell:vostro_3881_firmware","dell:vostro_3888_firmware","dell:vostro_3890_firmware","dell:vostro_5880_firmware","dell:vostro_5890_firmware","dell:vostro_7500_firmware","dell:vostro_7590_firmware","dell:wyse_5070_firmware","dell:wyse_5470_firmware","dell:xps_13_9380_firmware","dell:xps_15_7590_firmware","dell:xps_17_9710_firmware","dell:xps_8940_firmware"],"type":"missing_authorization","year":"2023"},"n_packages":0,"n_references":1,"next":{"headline":"Missing authorization in CPG BIOS","id":"CVE-2023-28060"},"packages":[],"prev":{"headline":"Missing authorization in CPG BIOS","id":"CVE-2023-28058"},"products":["CPG BIOS"],"published":"2023-06-23","related":[{"cvss_score":8.2,"headline":"Code injection in CPG BIOS","id":"CVE-2022-32488","kev_date_added":null,"published":"2022-10-12"},{"cvss_score":8.2,"headline":"Other in CPG BIOS","id":"CVE-2022-32489","kev_date_added":null,"published":"2022-10-12"},{"cvss_score":7.5,"headline":"Race condition in CPG BIOS","id":"CVE-2022-34398","kev_date_added":null,"published":"2023-02-01"},{"cvss_score":7.5,"headline":"Code injection in CPG BIOS","id":"CVE-2022-32485","kev_date_added":null,"published":"2022-10-12"},{"cvss_score":7.5,"headline":"Code injection in CPG BIOS","id":"CVE-2022-32487","kev_date_added":null,"published":"2022-10-12"},{"cvss_score":6.9,"headline":"Other in CPG BIOS","id":"CVE-2022-22566","kev_date_added":null,"published":"2022-02-09"},{"cvss_score":6,"headline":"Memory corruption in CPG BIOS","id":"CVE-2022-32493","kev_date_added":null,"published":"2022-10-12"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2024-11-08","vendors":["Dell"]},"summary":"A local authenticated administrator can modify UEFI variables in Dell BIOS due to improper input validation.","url":"https://insights.sbomify.com/CVE-2023-28059/"}