{"answers":{"affected":"It affects 346 products.","exploited":"There is no known exploitation of CVE-2023-43078 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2023-43078 yet. Limit exposure of the affected software until one is available.","what":"CVE-2023-43078 is a medium-severity path traversal vulnerability in Dell Chengming 3990 Firmware, published on 28 Aug 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link."},"fix_prompt":"Check this codebase for CVE-2023-43078 and fix it if it is affected.\n\nWhat it is: CVE-2023-43078 is a medium-severity path traversal vulnerability in Dell Chengming 3990 Firmware, published on 28 Aug 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.\nExploitation: There is no known exploitation of CVE-2023-43078 in the wild and no public exploit code.\n\nAffected product: Dell Chengming 3990 Firmware. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2023-43078/ (Markdown: https://insights.sbomify.com/CVE-2023-43078/index.md)","id":"CVE-2023-43078","markdown":"https://insights.sbomify.com/CVE-2023-43078/index.md","name":"CVE-2023-43078","record":{"aliases":["GHSA-296j-r9gr-7w2c"],"analysis":{"component_type":"hardware_firmware","fix_type":"patch","impacts":["privilege_escalation","denial_of_service"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Dell Dock Firmware","requires_auth":"low_privilege","summary":"Attackers can exploit improper link resolution during installation to delete arbitrary folders, leading to privilege escalation or denial of service.","user_interaction":"required","vuln_class":"path_traversal"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"dell","cpe":[{"product":"alienware_m15_r6_firmware","vendor":"dell"},{"product":"alienware_m15_r7_firmware","vendor":"dell"},{"product":"alienware_m16_r1_firmware","vendor":"dell"},{"product":"alienware_m18_r1_firmware","vendor":"dell"},{"product":"alienware_x14_r2_firmware","vendor":"dell"},{"product":"alienware_x16_r1_firmware","vendor":"dell"},{"product":"chengming_3900_firmware","vendor":"dell"},{"product":"chengming_3910_firmware","vendor":"dell"},{"product":"chengming_3911_firmware","vendor":"dell"},{"product":"chengming_3988_firmware","vendor":"dell"},{"product":"chengming_3990_firmware","vendor":"dell"},{"product":"chengming_3991_firmware","vendor":"dell"},{"product":"dock_hd22q_firmware_update_utility","vendor":"dell"},{"product":"dock_wd19_firmware_update_utility","vendor":"dell"},{"product":"dock_wd22tb4_firmware_update_utility","vendor":"dell"},{"product":"g15_5510_firmware","vendor":"dell"},{"product":"g15_5511_firmware","vendor":"dell"},{"product":"g15_5520_firmware","vendor":"dell"},{"product":"g15_5530_firmware","vendor":"dell"},{"product":"g16_7620_firmware","vendor":"dell"},{"product":"g16_7630_firmware","vendor":"dell"},{"product":"g3_3500_firmware","vendor":"dell"},{"product":"g5_5000_firmware","vendor":"dell"},{"product":"g5_5090_firmware","vendor":"dell"},{"product":"g5_5500_firmware","vendor":"dell"},{"product":"g7_7500_firmware","vendor":"dell"},{"product":"g7_7700_firmware","vendor":"dell"},{"product":"inspiron_13_5310_firmware","vendor":"dell"},{"product":"inspiron_13_5320_firmware","vendor":"dell"},{"product":"inspiron_13_5330_firmware","vendor":"dell"},{"product":"inspiron_14_5410_firmware","vendor":"dell"},{"product":"inspiron_14_5418_firmware","vendor":"dell"},{"product":"inspiron_14_5420_firmware","vendor":"dell"},{"product":"inspiron_14_5430_firmware","vendor":"dell"},{"product":"inspiron_14_7420_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_14_7430_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_14_plus_7420_firmware","vendor":"dell"},{"product":"inspiron_14_plus_7430_firmware","vendor":"dell"},{"product":"inspiron_15_3511_firmware","vendor":"dell"},{"product":"inspiron_15_3520_firmware","vendor":"dell"},{"product":"inspiron_15_3530_firmware","vendor":"dell"},{"product":"inspiron_15_5510_firmware","vendor":"dell"},{"product":"inspiron_15_5518_firmware","vendor":"dell"},{"product":"inspiron_15_7510_firmware","vendor":"dell"},{"product":"inspiron_16_5620_firmware","vendor":"dell"},{"product":"inspiron_16_5630_firmware","vendor":"dell"},{"product":"inspiron_16_7610_firmware","vendor":"dell"},{"product":"inspiron_16_7620_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_16_7630_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_16_plus_7620_firmware","vendor":"dell"},{"product":"inspiron_16_plus_7630_firmware","vendor":"dell"},{"product":"inspiron_24_5410_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_24_5411_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_24_5420_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_27_7710_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_27_7720_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_3020_desktop_firmware","vendor":"dell"},{"product":"inspiron_3020_small_desktop_firmware","vendor":"dell"},{"product":"inspiron_3471_firmware","vendor":"dell"},{"product":"inspiron_3480_firmware","vendor":"dell"},{"product":"inspiron_3501_firmware","vendor":"dell"},{"product":"inspiron_3580_firmware","vendor":"dell"},{"product":"inspiron_3593_firmware","vendor":"dell"},{"product":"inspiron_3671_firmware","vendor":"dell"},{"product":"inspiron_3793_firmware","vendor":"dell"},{"product":"inspiron_3880_firmware","vendor":"dell"},{"product":"inspiron_3881_firmware","vendor":"dell"},{"product":"inspiron_3891_firmware","vendor":"dell"},{"product":"inspiron_3910_firmware","vendor":"dell"},{"product":"inspiron_5301_firmware","vendor":"dell"},{"product":"inspiron_5400_firmware","vendor":"dell"},{"product":"inspiron_5401_aio_firmware","vendor":"dell"},{"product":"inspiron_5401_firmware","vendor":"dell"},{"product":"inspiron_5402_firmware","vendor":"dell"},{"product":"inspiron_5406_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_5409_firmware","vendor":"dell"},{"product":"inspiron_5410_firmware","vendor":"dell"},{"product":"inspiron_5502_firmware","vendor":"dell"},{"product":"inspiron_5509_firmware","vendor":"dell"},{"product":"inspiron_5593_firmware","vendor":"dell"},{"product":"inspiron_7300_firmware","vendor":"dell"},{"product":"inspiron_7306_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_7400_firmware","vendor":"dell"},{"product":"inspiron_7490_firmware","vendor":"dell"},{"product":"inspiron_7500_firmware","vendor":"dell"},{"product":"inspiron_7501_firmware","vendor":"dell"},{"product":"inspiron_7506_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_7700_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_7706_2-in-1_firmware","vendor":"dell"},{"product":"intel_thunderbolt_controller_firmware_update_utility","vendor":"dell"},{"product":"latitude_3120_firmware","vendor":"dell"},{"product":"latitude_3140_firmware","vendor":"dell"},{"product":"latitude_3190_2-in-1_firmware","vendor":"dell"},{"product":"latitude_3190_firmware","vendor":"dell"},{"product":"latitude_3300_firmware","vendor":"dell"},{"product":"latitude_3301_firmware","vendor":"dell"},{"product":"latitude_3310_2-in-1_firmware","vendor":"dell"},{"product":"latitude_3310_firmware","vendor":"dell"},{"product":"latitude_3320_firmware","vendor":"dell"},{"product":"latitude_3330_firmware","vendor":"dell"},{"product":"latitude_3340_firmware","vendor":"dell"},{"product":"latitude_3400_firmware","vendor":"dell"},{"product":"latitude_3410_firmware","vendor":"dell"},{"product":"latitude_3420_firmware","vendor":"dell"},{"product":"latitude_3430_firmware","vendor":"dell"},{"product":"latitude_3440_firmware","vendor":"dell"},{"product":"latitude_3500_firmware","vendor":"dell"},{"product":"latitude_3510_firmware","vendor":"dell"},{"product":"latitude_3520_firmware","vendor":"dell"},{"product":"latitude_3530_firmware","vendor":"dell"},{"product":"latitude_3540_firmware","vendor":"dell"},{"product":"latitude_5290_2-in-1_firmware","vendor":"dell"},{"product":"latitude_5290_firmware","vendor":"dell"},{"product":"latitude_5300_2-in-1_firmware","vendor":"dell"},{"product":"latitude_5300_firmware","vendor":"dell"},{"product":"latitude_5310_2-in-1_firmware","vendor":"dell"},{"product":"latitude_5310_firmware","vendor":"dell"},{"product":"latitude_5320_firmware","vendor":"dell"},{"product":"latitude_5330_firmware","vendor":"dell"},{"product":"latitude_5340_firmware","vendor":"dell"},{"product":"latitude_5400_firmware","vendor":"dell"},{"product":"latitude_5401_firmware","vendor":"dell"},{"product":"latitude_5410_firmware","vendor":"dell"},{"product":"latitude_5411_firmware","vendor":"dell"},{"product":"latitude_5420_firmware","vendor":"dell"},{"product":"latitude_5420_rugged_firmware","vendor":"dell"},{"product":"latitude_5421_firmware","vendor":"dell"},{"product":"latitude_5424_rugged_firmware","vendor":"dell"},{"product":"latitude_5430_firmware","vendor":"dell"},{"product":"latitude_5430_rugged_laptop_firmware","vendor":"dell"},{"product":"latitude_5431_firmware","vendor":"dell"},{"product":"latitude_5440_firmware","vendor":"dell"},{"product":"latitude_5490_firmware","vendor":"dell"},{"product":"latitude_5491_firmware","vendor":"dell"},{"product":"latitude_5500_firmware","vendor":"dell"},{"product":"latitude_5501_firmware","vendor":"dell"},{"product":"latitude_5510_firmware","vendor":"dell"},{"product":"latitude_5511_firmware","vendor":"dell"},{"product":"latitude_5520_firmware","vendor":"dell"},{"product":"latitude_5521_firmware","vendor":"dell"},{"product":"latitude_5530_firmware","vendor":"dell"},{"product":"latitude_5531_firmware","vendor":"dell"},{"product":"latitude_5540_firmware","vendor":"dell"},{"product":"latitude_5590_firmware","vendor":"dell"},{"product":"latitude_5591_firmware","vendor":"dell"},{"product":"latitude_7200_2-in-1_firmware","vendor":"dell"},{"product":"latitude_7210_2-in-1_firmware","vendor":"dell"},{"product":"latitude_7220_rugged_extreme_firmware","vendor":"dell"},{"product":"latitude_7230_rugged_extreme_firmware","vendor":"dell"},{"product":"latitude_7290_firmware","vendor":"dell"},{"product":"latitude_7300_firmware","vendor":"dell"},{"product":"latitude_7310_firmware","vendor":"dell"},{"product":"latitude_7320_detachable_firmware","vendor":"dell"},{"product":"latitude_7320_firmware","vendor":"dell"},{"product":"latitude_7330_firmware","vendor":"dell"},{"product":"latitude_7330_rugged_laptop_firmware","vendor":"dell"},{"product":"latitude_7340_firmware","vendor":"dell"},{"product":"latitude_7390_firmware","vendor":"dell"},{"product":"latitude_7400_2-in-1_firmware","vendor":"dell"},{"product":"latitude_7400_firmware","vendor":"dell"},{"product":"latitude_7410_firmware","vendor":"dell"},{"product":"latitude_7420_firmware","vendor":"dell"},{"product":"latitude_7424_rugged_extreme_firmware","vendor":"dell"},{"product":"latitude_7430_firmware","vendor":"dell"},{"product":"latitude_7440_firmware","vendor":"dell"},{"product":"latitude_7490_firmware","vendor":"dell"},{"product":"latitude_7520_firmware","vendor":"dell"},{"product":"latitude_7530_firmware","vendor":"dell"},{"product":"latitude_7640_firmware","vendor":"dell"},{"product":"latitude_9330_firmware","vendor":"dell"},{"product":"latitude_9410_firmware","vendor":"dell"},{"product":"latitude_9420_firmware","vendor":"dell"},{"product":"latitude_9430_firmware","vendor":"dell"},{"product":"latitude_9440_2-in-1_firmware","vendor":"dell"},{"product":"latitude_9510_2in1_firmware","vendor":"dell"},{"product":"latitude_9520_firmware","vendor":"dell"},{"product":"latitude_rugged_7220ex_firmware","vendor":"dell"},{"product":"optiplex_3000_micro_firmware","vendor":"dell"},{"product":"optiplex_3000_small_form_factor_firmware","vendor":"dell"},{"product":"optiplex_3000_thin_client_firmware","vendor":"dell"},{"product":"optiplex_3000_tower_firmware","vendor":"dell"},{"product":"optiplex_3060_firmware","vendor":"dell"},{"product":"optiplex_3070_firmware","vendor":"dell"},{"product":"optiplex_3080_firmware","vendor":"dell"},{"product":"optiplex_3090_firmware","vendor":"dell"},{"product":"optiplex_3090_ultra_firmware","vendor":"dell"},{"product":"optiplex_3280_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_5000_micro_firmware","vendor":"dell"},{"product":"optiplex_5000_small_form_factor_firmware","vendor":"dell"},{"product":"optiplex_5000_tower_firmware","vendor":"dell"},{"product":"optiplex_5060_firmware","vendor":"dell"},{"product":"optiplex_5070_firmware","vendor":"dell"},{"product":"optiplex_5080_firmware","vendor":"dell"},{"product":"optiplex_5090_micro_firmware","vendor":"dell"},{"product":"optiplex_5090_small_form_factor_firmware","vendor":"dell"},{"product":"optiplex_5090_tower_firmware","vendor":"dell"},{"product":"optiplex_5260_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_5270_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_5400_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_5480_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_5490_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7000_micro_firmware","vendor":"dell"},{"product":"optiplex_7000_small_form_factor_firmware","vendor":"dell"},{"product":"optiplex_7000_tower_firmware","vendor":"dell"},{"product":"optiplex_7000_xe_micro_firmware","vendor":"dell"},{"product":"optiplex_7060_firmware","vendor":"dell"},{"product":"optiplex_7070_firmware","vendor":"dell"},{"product":"optiplex_7070_ultra_firmware","vendor":"dell"},{"product":"optiplex_7071_firmware","vendor":"dell"},{"product":"optiplex_7080_firmware","vendor":"dell"},{"product":"optiplex_7090_tower_firmware","vendor":"dell"},{"product":"optiplex_7090_ultra_firmware","vendor":"dell"},{"product":"optiplex_7400_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7460_all_in_one_firmware","vendor":"dell"},{"product":"optiplex_7470_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7480_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7490_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7760_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7770_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7780_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_all-in-one_7410_firmware","vendor":"dell"},{"product":"optiplex_micro_7010_firmware","vendor":"dell"},{"product":"optiplex_micro_plus_7010_firmware","vendor":"dell"},{"product":"optiplex_small_form_factor_7010_firmware","vendor":"dell"},{"product":"optiplex_small_form_factor_plus_7010_firmware","vendor":"dell"},{"product":"optiplex_tower_7010_firmware","vendor":"dell"},{"product":"optiplex_tower_plus_7010_firmware","vendor":"dell"},{"product":"optiplex_xe3_firmware","vendor":"dell"},{"product":"optiplex_xe4_tower_firmware","vendor":"dell"},{"product":"precision_3240_compact_firmware","vendor":"dell"},{"product":"precision_3260_compact_firmware","vendor":"dell"},{"product":"precision_3260_xe_compact_firmware","vendor":"dell"},{"product":"precision_3430_tower_firmware","vendor":"dell"},{"product":"precision_3431_tower_firmware","vendor":"dell"},{"product":"precision_3440_firmware","vendor":"dell"},{"product":"precision_3450_firmware","vendor":"dell"},{"product":"precision_3460_small_form_factor_firmware","vendor":"dell"},{"product":"precision_3460_xe_small_form_factor_firmware","vendor":"dell"},{"product":"precision_3470_firmware","vendor":"dell"},{"product":"precision_3480_firmware","vendor":"dell"},{"product":"precision_3530_firmware","vendor":"dell"},{"product":"precision_3540_firmware","vendor":"dell"},{"product":"precision_3541_firmware","vendor":"dell"},{"product":"precision_3550_firmware","vendor":"dell"},{"product":"precision_3551_firmware","vendor":"dell"},{"product":"precision_3560_firmware","vendor":"dell"},{"product":"precision_3561_firmware","vendor":"dell"},{"product":"precision_3570_firmware","vendor":"dell"},{"product":"precision_3571_firmware","vendor":"dell"},{"product":"precision_3580_firmware","vendor":"dell"},{"product":"precision_3581_firmware","vendor":"dell"},{"product":"precision_3630_tower_firmware","vendor":"dell"},{"product":"precision_3640_firmware","vendor":"dell"},{"product":"precision_3650_tower_firmware","vendor":"dell"},{"product":"precision_3660_firmware","vendor":"dell"},{"product":"precision_3930_rack_firmware","vendor":"dell"},{"product":"precision_5470_firmware","vendor":"dell"},{"product":"precision_5480_firmware","vendor":"dell"},{"product":"precision_5530_2-in-1_firmware","vendor":"dell"},{"product":"precision_5530_firmware","vendor":"dell"},{"product":"precision_5540_firmware","vendor":"dell"},{"product":"precision_5550_firmware","vendor":"dell"},{"product":"precision_5560_firmware","vendor":"dell"},{"product":"precision_5570_firmware","vendor":"dell"},{"product":"precision_5680_firmware","vendor":"dell"},{"product":"precision_5750_firmware","vendor":"dell"},{"product":"precision_5760_firmware","vendor":"dell"},{"product":"precision_5770_firmware","vendor":"dell"},{"product":"precision_5860_tower_firmware","vendor":"dell"},{"product":"precision_7530_firmware","vendor":"dell"},{"product":"precision_7540_firmware","vendor":"dell"},{"product":"precision_7550_firmware","vendor":"dell"},{"product":"precision_7560_firmware","vendor":"dell"},{"product":"precision_7670_firmware","vendor":"dell"},{"product":"precision_7680_firmware","vendor":"dell"},{"product":"precision_7730_firmware","vendor":"dell"},{"product":"precision_7740_firmware","vendor":"dell"},{"product":"precision_7750_firmware","vendor":"dell"},{"product":"precision_7760_firmware","vendor":"dell"},{"product":"precision_7770_firmware","vendor":"dell"},{"product":"precision_7780_firmware","vendor":"dell"},{"product":"precision_7865_tower_firmware","vendor":"dell"},{"product":"precision_7960_tower_firmware","vendor":"dell"},{"product":"tpm_2.0_firmware_update_utility","vendor":"dell"},{"product":"universal_dock_ud22_firmware_update_utility","vendor":"dell"},{"product":"vostro_13_5310_firmware","vendor":"dell"},{"product":"vostro_14_3420_firmware","vendor":"dell"},{"product":"vostro_14_3430_firmware","vendor":"dell"},{"product":"vostro_14_5410_firmware","vendor":"dell"},{"product":"vostro_15_3510_firmware","vendor":"dell"},{"product":"vostro_15_3520_firmware","vendor":"dell"},{"product":"vostro_15_3530_firmware","vendor":"dell"},{"product":"vostro_15_5510_firmware","vendor":"dell"},{"product":"vostro_15_7510_firmware","vendor":"dell"},{"product":"vostro_16_5630_firmware","vendor":"dell"},{"product":"vostro_3020_small_desktop_firmware","vendor":"dell"},{"product":"vostro_3020_tower_desktop_firmware","vendor":"dell"},{"product":"vostro_3400_firmware","vendor":"dell"},{"product":"vostro_3401_firmware","vendor":"dell"},{"product":"vostro_3471_firmware","vendor":"dell"},{"product":"vostro_3480_firmware","vendor":"dell"},{"product":"vostro_3500_firmware","vendor":"dell"},{"product":"vostro_3501_firmware","vendor":"dell"},{"product":"vostro_3580_firmware","vendor":"dell"},{"product":"vostro_3583_firmware","vendor":"dell"},{"product":"vostro_3590_firmware","vendor":"dell"},{"product":"vostro_3671_firmware","vendor":"dell"},{"product":"vostro_3681_firmware","vendor":"dell"},{"product":"vostro_3690_firmware","vendor":"dell"},{"product":"vostro_3710_firmware","vendor":"dell"},{"product":"vostro_3881_firmware","vendor":"dell"},{"product":"vostro_3888_firmware","vendor":"dell"},{"product":"vostro_3890_firmware","vendor":"dell"},{"product":"vostro_3910_firmware","vendor":"dell"},{"product":"vostro_5090_firmware","vendor":"dell"},{"product":"vostro_5301_firmware","vendor":"dell"},{"product":"vostro_5320_firmware","vendor":"dell"},{"product":"vostro_5402_firmware","vendor":"dell"},{"product":"vostro_5502_firmware","vendor":"dell"},{"product":"vostro_5620_firmware","vendor":"dell"},{"product":"vostro_5880_firmware","vendor":"dell"},{"product":"vostro_5890_firmware","vendor":"dell"},{"product":"vostro_7500_firmware","vendor":"dell"},{"product":"vostro_7620_firmware","vendor":"dell"},{"product":"wyse_5070_firmware","vendor":"dell"},{"product":"wyse_5470_all-in-one_firmware","vendor":"dell"},{"product":"wyse_5470_firmware","vendor":"dell"},{"product":"xps_13_7390_2-in-1_firmware","vendor":"dell"},{"product":"xps_13_7390_firmware","vendor":"dell"},{"product":"xps_13_9300_firmware","vendor":"dell"},{"product":"xps_13_9305_firmware","vendor":"dell"},{"product":"xps_13_9310_2-in-1_firmware","vendor":"dell"},{"product":"xps_13_9310_firmware","vendor":"dell"},{"product":"xps_13_9315_firmware","vendor":"dell"},{"product":"xps_13_plus_9320_firmware","vendor":"dell"},{"product":"xps_15_7590_firmware","vendor":"dell"},{"product":"xps_15_9500_firmware","vendor":"dell"},{"product":"xps_15_9510_firmware","vendor":"dell"},{"product":"xps_15_9520_firmware","vendor":"dell"},{"product":"xps_15_9530_firmware","vendor":"dell"},{"product":"xps_17_9700_firmware","vendor":"dell"},{"product":"xps_17_9710_firmware","vendor":"dell"},{"product":"xps_17_9720_firmware","vendor":"dell"},{"product":"xps_17_9730_firmware","vendor":"dell"},{"product":"xps_8940_firmware","vendor":"dell"},{"product":"xps_9315_2-in-1_firmware","vendor":"dell"}],"cvss":{"score":6.7,"severity":"medium","source":"cna","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"cwes":[{"id":"CWE-59","name":"Improper Link Resolution Before File Access"}],"description":"Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Path traversal in Dell Client Platform, Dell Dock Firmware","id":"CVE-2023-43078","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":"dell:chengming_3990_firmware","products":["dell:chengming_3990_firmware","dell:chengming_3991_firmware","dell:g5_5000_firmware","dell:inspiron_3480_firmware","dell:inspiron_3501_firmware","dell:inspiron_3580_firmware","dell:inspiron_3593_firmware","dell:inspiron_3793_firmware","dell:inspiron_3880_firmware","dell:inspiron_3881_firmware","dell:inspiron_3891_firmware","dell:inspiron_5400_firmware","dell:inspiron_5401_firmware","dell:inspiron_5593_firmware","dell:inspiron_7490_firmware","dell:inspiron_7500_firmware","dell:inspiron_7501_firmware","dell:latitude_3120_firmware","dell:latitude_3190_2-in-1_firmware","dell:latitude_3190_firmware","dell:latitude_3300_firmware","dell:latitude_3301_firmware","dell:latitude_3310_2-in-1_firmware","dell:latitude_3310_firmware","dell:latitude_3320_firmware","dell:latitude_3420_firmware","dell:latitude_3520_firmware","dell:latitude_5290_2-in-1_firmware","dell:latitude_5290_firmware","dell:latitude_5300_2-in-1_firmware","dell:latitude_5300_firmware","dell:latitude_5310_2-in-1_firmware","dell:latitude_5310_firmware","dell:latitude_5320_firmware","dell:latitude_5400_firmware","dell:latitude_5401_firmware","dell:latitude_5410_firmware","dell:latitude_5411_firmware","dell:latitude_5420_firmware","dell:latitude_5420_rugged_firmware","dell:latitude_5490_firmware","dell:latitude_5491_firmware","dell:latitude_5500_firmware","dell:latitude_5501_firmware","dell:latitude_5510_firmware","dell:latitude_5511_firmware","dell:latitude_5520_firmware","dell:latitude_5521_firmware","dell:latitude_5590_firmware","dell:latitude_5591_firmware","dell:latitude_7200_2-in-1_firmware","dell:latitude_7210_2-in-1_firmware","dell:latitude_7290_firmware","dell:latitude_7300_firmware","dell:latitude_7310_firmware","dell:latitude_7320_detachable_firmware","dell:latitude_7390_firmware","dell:latitude_7400_2-in-1_firmware","dell:latitude_7400_firmware","dell:latitude_7410_firmware","dell:latitude_7424_rugged_extreme_firmware","dell:latitude_7490_firmware","dell:latitude_9410_firmware","dell:latitude_9420_firmware","dell:latitude_9520_firmware","dell:optiplex_3060_firmware","dell:optiplex_3070_firmware","dell:optiplex_3080_firmware","dell:optiplex_5060_firmware","dell:optiplex_5070_firmware","dell:optiplex_5080_firmware","dell:optiplex_5480_all-in-one_firmware","dell:optiplex_7060_firmware","dell:optiplex_7070_firmware","dell:optiplex_7071_firmware","dell:optiplex_7080_firmware","dell:optiplex_7480_all-in-one_firmware","dell:optiplex_xe3_firmware","dell:precision_3440_firmware","dell:precision_3450_firmware","dell:precision_3530_firmware","dell:precision_3540_firmware","dell:precision_3541_firmware","dell:precision_3550_firmware","dell:precision_3551_firmware","dell:precision_3560_firmware","dell:precision_3561_firmware","dell:precision_3930_rack_firmware","dell:precision_5530_2-in-1_firmware","dell:precision_5530_firmware","dell:precision_5540_firmware","dell:precision_5550_firmware","dell:precision_5760_firmware","dell:precision_7530_firmware","dell:precision_7540_firmware","dell:precision_7560_firmware","dell:precision_7730_firmware","dell:precision_7740_firmware","dell:precision_7760_firmware","dell:vostro_3480_firmware","dell:vostro_3501_firmware","dell:vostro_3580_firmware","dell:vostro_3583_firmware","dell:vostro_3590_firmware","dell:vostro_3681_firmware","dell:vostro_3690_firmware","dell:vostro_3881_firmware","dell:vostro_3888_firmware","dell:vostro_3890_firmware","dell:vostro_5880_firmware","dell:vostro_5890_firmware","dell:vostro_7500_firmware","dell:wyse_5070_firmware","dell:wyse_5470_firmware","dell:xps_15_7590_firmware","dell:xps_17_9710_firmware","dell:xps_8940_firmware"],"type":"path_traversal","year":"2023"},"n_packages":0,"n_references":1,"next":{"headline":"Privilege escalation in Dell OpenManage Server Administrator","id":"CVE-2023-43079"},"packages":[],"prev":{"headline":"Denial of service in PowerScale OneFS","id":"CVE-2023-43076"},"products":["Dell Client Platform, Dell Dock Firmware"],"published":"2024-08-28","related":[{"cvss_score":8.2,"headline":"Auth bypass in Dell Client Platform BIOS","id":"CVE-2024-52541","kev_date_added":null,"published":"2025-02-19"},{"cvss_score":7.9,"headline":"Code injection in CPG BIOS","id":"CVE-2022-26861","kev_date_added":null,"published":"2022-09-06"},{"cvss_score":7.5,"headline":"Memory corruption in CPG BIOS","id":"CVE-2022-34403","kev_date_added":null,"published":"2023-02-01"},{"cvss_score":7.5,"headline":"Memory corruption in CPG BIOS","id":"CVE-2022-26860","kev_date_added":null,"published":"2022-09-06"},{"cvss_score":7.2,"headline":"Memory corruption in BIOSConnect","id":"CVE-2021-21572","kev_date_added":null,"published":"2021-06-24"},{"cvss_score":7.2,"headline":"Memory corruption in BIOSConnect","id":"CVE-2021-21573","kev_date_added":null,"published":"2021-06-24"},{"cvss_score":7.2,"headline":"Memory corruption in BIOSConnect","id":"CVE-2021-21574","kev_date_added":null,"published":"2021-06-24"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"total"},"state":"PUBLISHED","updated":"2024-08-28","vendors":["Dell"]},"summary":"Attackers can exploit improper link resolution during installation to delete arbitrary folders, leading to privilege escalation or denial of service.","url":"https://insights.sbomify.com/CVE-2023-43078/"}