CVE-2023-32469 Code injection in Dell Precision 5820 Tower, Dell Precision 7820 Tower, Dell Precision 7920 Tower
A local attacker with admin privileges can exploit improper input validation in Dell Precision Tower BIOS to execute arbitrary code.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-32469?
CVE-2023-32469 is a high-severity code injection vulnerability in Dell Precision 5820 Tower, Dell Precision 7820 Tower, Dell Precision 7920 Tower, published on 16 Nov 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges could potentially exploit this vulnerability to perform arbitrary code execution.
Weakness: CWE-20
Which versions are affected by CVE-2023-32469?
It affects 3 products.
Products include Dell Precision 5820 Firmware, Dell Precision 7820 Firmware, Dell Precision 7920 Firmware.
How do I fix CVE-2023-32469?
No fix has been published for CVE-2023-32469 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2023-32469 being exploited?
There is no known exploitation of CVE-2023-32469 in the wild and no public exploit code.
Sources
Also known as GHSA-5w73-v8j5-v9mp.