Details of VAR-202308-2845

ID

VAR-202308-2845

CVE

CVE-2023-28075

TITLE

on multiple Dell products. Time-of-check Time-of-use (TOCTOU) Race condition vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2023-022081

DESCRIPTION

Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system. Alienware m15 R7 firmware, alienware m16 firmware, alienware m18 For multiple Dell products such as firmware, Time-of-check Time-of-use (TOCTOU) There is a race condition vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.71

sources: NVD: CVE-2023-28075 // JVNDB: JVNDB-2023-022081 // VULMON: CVE-2023-28075

AFFECTED PRODUCTS

vendor:	dell	model:	xps 13 9310 2-in-1	scope:	lt	version:	2.19.0	Trust: 1.0
vendor:	dell	model:	precision 5680	scope:	lt	version:	1.4.1	Trust: 1.0
vendor:	dell	model:	inspiron 14 5418	scope:	lt	version:	2.20.0	Trust: 1.0
vendor:	dell	model:	inspiron 24 5420 all-in-one	scope:	lt	version:	1.4.0	Trust: 1.0
vendor:	dell	model:	latitude 7310	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	chengming 3911	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	inspiron 5491 aio	scope:	lt	version:	1.22.0	Trust: 1.0
vendor:	dell	model:	latitude 7390 2-in-1	scope:	lt	version:	1.31.0	Trust: 1.0
vendor:	dell	model:	optiplex 7070	scope:	lt	version:	1.22.0	Trust: 1.0
vendor:	dell	model:	optiplex 7480 all-in-one	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	xps 13 9305	scope:	lt	version:	1.16.0	Trust: 1.0
vendor:	dell	model:	vostro 3910	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	alienware m15 r7	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	optiplex 5490 all-in-one	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	vostro 3670	scope:	lt	version:	2.32.0	Trust: 1.0
vendor:	dell	model:	xps 15 9575 2-in-1	scope:	lt	version:	1.28.0	Trust: 1.0
vendor:	dell	model:	latitude 5285 2-in-1	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	optiplex small form factor plus 7010	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	latitude 7380	scope:	lt	version:	1.32.1	Trust: 1.0
vendor:	dell	model:	optiplex 5270 all-in-one	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	inspiron 5401 aio	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	inspiron 15 5518	scope:	lt	version:	2.20.0	Trust: 1.0
vendor:	dell	model:	latitude 5511	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	vostro 3881	scope:	lt	version:	2.21.0	Trust: 1.0
vendor:	dell	model:	inspiron 7490	scope:	lt	version:	1.22.0	Trust: 1.0
vendor:	dell	model:	latitude 7320	scope:	lt	version:	1.28.0	Trust: 1.0
vendor:	dell	model:	chengming 3990	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	latitude 7400	scope:	lt	version:	1.26.0	Trust: 1.0
vendor:	dell	model:	optiplex 3050 all-in-one	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	dell	model:	precision 3260 compact	scope:	lt	version:	2.7.0	Trust: 1.0
vendor:	dell	model:	precision 7550	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	inspiron 15 5510	scope:	lt	version:	2.20.0	Trust: 1.0
vendor:	dell	model:	inspiron 3881	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	g7 17 7700	scope:	lt	version:	1.26.0	Trust: 1.0
vendor:	dell	model:	inspiron 27 7720 all-in-one	scope:	lt	version:	1.4.0	Trust: 1.0
vendor:	dell	model:	optiplex tower plus 7010	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	inspiron 3593	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	dell	model:	precision 5530	scope:	lt	version:	1.32.0	Trust: 1.0
vendor:	dell	model:	vostro 3890	scope:	lt	version:	1.19.0	Trust: 1.0
vendor:	dell	model:	inspiron 3470	scope:	lt	version:	2.32.0	Trust: 1.0
vendor:	dell	model:	inspiron 14 5410	scope:	lt	version:	2.20.0	Trust: 1.0
vendor:	dell	model:	latitude 5290 2-in-1	scope:	lt	version:	1.28.0	Trust: 1.0
vendor:	dell	model:	optiplex 7770 all-in-one	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	optiplex 3000 thin client	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	wyse 5470 all-in-one	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	latitude 7520	scope:	lt	version:	1.28.0	Trust: 1.0
vendor:	dell	model:	latitude 3190 2-in-1	scope:	lt	version:	1.28.0	Trust: 1.0
vendor:	dell	model:	latitude 9520	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	optiplex 7080	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	precision 5530 2-in-1	scope:	lt	version:	1.26.8	Trust: 1.0
vendor:	dell	model:	xps 13 9380	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	xps 13 9315	scope:	lt	version:	1.13.0	Trust: 1.0
vendor:	dell	model:	precision 5540	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	vostro 3470	scope:	lt	version:	2.32.0	Trust: 1.0
vendor:	dell	model:	latitude 9410	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	xps 13 9300	scope:	lt	version:	1.19.0	Trust: 1.0
vendor:	dell	model:	precision 7750	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	latitude 5400	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	latitude 5280	scope:	lt	version:	1.31.0	Trust: 1.0
vendor:	dell	model:	inspiron 3481	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	inspiron 3880	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	g15 5520	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	latitude 3530	scope:	lt	version:	1.12.0	Trust: 1.0
vendor:	dell	model:	latitude rugged 7220ex	scope:	lt	version:	1.30.0	Trust: 1.0
vendor:	dell	model:	edge gateway 5000	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	alienware m18	scope:	lt	version:	1.10.1	Trust: 1.0
vendor:	dell	model:	latitude 9330	scope:	lt	version:	1.13.0	Trust: 1.0
vendor:	dell	model:	latitude 5430	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	optiplex 7760 all-in-one	scope:	lt	version:	1.28.0	Trust: 1.0
vendor:	dell	model:	vostro 3510	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	g16 7620	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	latitude 3400	scope:	lt	version:	1.29.0	Trust: 1.0
vendor:	dell	model:	latitude 5480	scope:	lt	version:	1.31.0	Trust: 1.0
vendor:	dell	model:	chengming 3900	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	vostro 5890	scope:	lt	version:	1.19.0	Trust: 1.0
vendor:	dell	model:	inspiron 5400	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	inspiron 3581	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	vostro 7500	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	latitude 5300 2-in-1	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	dell	model:	inspiron 7700 all-in-one	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	precision 5820 tower	scope:	lt	version:	2.31.0	Trust: 1.0
vendor:	dell	model:	latitude 5424 rugged	scope:	lt	version:	1.26.1	Trust: 1.0
vendor:	dell	model:	latitude 7285 2-in-1	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	optiplex 7470 all-in-one	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	vostro 3481	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	precision 7720	scope:	lt	version:	1.31.0	Trust: 1.0
vendor:	dell	model:	vostro 3581	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	embedded box pc 5000	scope:	lt	version:	1.20.0	Trust: 1.0
vendor:	dell	model:	inspiron 3020 small desktop	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	precision 3460 small form factor	scope:	lt	version:	2.7.0	Trust: 1.0
vendor:	dell	model:	latitude rugged 5430	scope:	lt	version:	1.20.0	Trust: 1.0
vendor:	dell	model:	xps 13 7390	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	optiplex 7070 ultra	scope:	lt	version:	1.20.0	Trust: 1.0
vendor:	dell	model:	precision 7540	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	dell	model:	latitude 7400 2-in-1	scope:	lt	version:	1.22.0	Trust: 1.0
vendor:	dell	model:	inspiron 3580	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	inspiron 7591	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	latitude 3180	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	latitude 3320	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	edge gateway 3000	scope:	lt	version:	1.13.0	Trust: 1.0
vendor:	dell	model:	precision 3540	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	precision 5570	scope:	lt	version:	1.16.0	Trust: 1.0
vendor:	dell	model:	precision 3551	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	optiplex xe4	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	g7 15 7590	scope:	lt	version:	1.26.0	Trust: 1.0
vendor:	dell	model:	inspiron 3780	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	latitude rugged 7330	scope:	lt	version:	1.20.0	Trust: 1.0
vendor:	dell	model:	latitude 3440	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	optiplex 3000	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	vostro 5510	scope:	lt	version:	2.20.0	Trust: 1.0
vendor:	dell	model:	precision 5860 tower	scope:	lt	version:	1.0.10	Trust: 1.0
vendor:	dell	model:	latitude 5431	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	chengming 3901	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	inspiron 7500	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	precision 7920 tower	scope:	lt	version:	2.35.0	Trust: 1.0
vendor:	dell	model:	inspiron 3493	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	dell	model:	chengming 3991	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	latitude 5500	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	precision 3630 tower	scope:	lt	version:	2.23.0	Trust: 1.0
vendor:	dell	model:	inspiron 15 3511	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	precision 7820 tower	scope:	lt	version:	2.35.0	Trust: 1.0
vendor:	dell	model:	optiplex 7000	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	g5 15 5500	scope:	lt	version:	1.26.0	Trust: 1.0
vendor:	dell	model:	latitude 7390	scope:	lt	version:	1.33.0	Trust: 1.0
vendor:	dell	model:	wyse 5470	scope:	lt	version:	1.20.0	Trust: 1.0
vendor:	dell	model:	latitude 5288	scope:	lt	version:	1.31.0	Trust: 1.0
vendor:	dell	model:	optiplex 7090	scope:	lt	version:	1.19.0	Trust: 1.0
vendor:	dell	model:	precision 5720 aio	scope:	lt	version:	2.20.0	Trust: 1.0
vendor:	dell	model:	optiplex 7400 all-in-one	scope:	lt	version:	1.1.30	Trust: 1.0
vendor:	dell	model:	inspiron 3891	scope:	lt	version:	1.19.0	Trust: 1.0
vendor:	dell	model:	latitude 7424 rugged extreme	scope:	lt	version:	1.26.1	Trust: 1.0
vendor:	dell	model:	inspiron 7501	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	precision 3640 tower	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	optiplex 5480 all-in-one	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	vostro 5410	scope:	lt	version:	2.20.0	Trust: 1.0
vendor:	dell	model:	latitude 7290	scope:	lt	version:	1.33.0	Trust: 1.0
vendor:	dell	model:	vostro 3690	scope:	lt	version:	1.19.0	Trust: 1.0
vendor:	dell	model:	inspiron 7610	scope:	lt	version:	1.17.0	Trust: 1.0
vendor:	dell	model:	optiplex 5250	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	dell	model:	inspiron 5490 aio	scope:	lt	version:	1.22.0	Trust: 1.0
vendor:	dell	model:	inspiron 7300 2-in-1	scope:	lt	version:	1.19.0	Trust: 1.0
vendor:	dell	model:	latitude 5310	scope:	lt	version:	1.20.0	Trust: 1.0
vendor:	dell	model:	inspiron 7790	scope:	lt	version:	1.22.0	Trust: 1.0
vendor:	dell	model:	optiplex 5400 all-in-one	scope:	lt	version:	1.1.30	Trust: 1.0
vendor:	dell	model:	vostro 3580	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	xps 13 9310	scope:	lt	version:	3.17.0	Trust: 1.0
vendor:	dell	model:	precision 3520	scope:	lt	version:	1.31.0	Trust: 1.0
vendor:	dell	model:	precision 7740	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	dell	model:	optiplex micro plus 7010	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	precision 7520	scope:	lt	version:	1.31.0	Trust: 1.0
vendor:	dell	model:	chengming 3980	scope:	lt	version:	2.32.0	Trust: 1.0
vendor:	dell	model:	precision 3460 xe small form factor	scope:	lt	version:	2.7.0	Trust: 1.0
vendor:	dell	model:	latitude 7410	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	inspiron 3793	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	dell	model:	latitude 3540	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	g3 3500	scope:	lt	version:	1.26.0	Trust: 1.0
vendor:	dell	model:	inspiron 7510	scope:	lt	version:	1.17.0	Trust: 1.0
vendor:	dell	model:	precision 3470	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	optiplex 7460 all-in-one	scope:	lt	version:	1.28.0	Trust: 1.0
vendor:	dell	model:	latitude 3190	scope:	lt	version:	1.28.0	Trust: 1.0
vendor:	dell	model:	precision 3930 rack	scope:	lt	version:	2.26.0	Trust: 1.0
vendor:	dell	model:	vostro 3020 t	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	latitude 3340	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	alienware m16	scope:	lt	version:	1.10.1	Trust: 1.0
vendor:	dell	model:	latitude 7480	scope:	lt	version:	1.32.1	Trust: 1.0
vendor:	dell	model:	latitude 7490	scope:	lt	version:	1.33.0	Trust: 1.0
vendor:	dell	model:	latitude 3500	scope:	lt	version:	1.29.0	Trust: 1.0
vendor:	dell	model:	embedded box pc 3000	scope:	lt	version:	1.19.0	Trust: 1.0
vendor:	dell	model:	inspiron 7590	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	optiplex 7780 all-in-one	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	precision 3660	scope:	lt	version:	2.7.0	Trust: 1.0
vendor:	dell	model:	vostro 3710	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	inspiron 7500 2-in-1 black	scope:	lt	version:	1.19.0	Trust: 1.0
vendor:	dell	model:	inspiron 3670	scope:	lt	version:	2.32.0	Trust: 1.0
vendor:	dell	model:	inspiron 3910	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	latitude 3430	scope:	lt	version:	1.12.0	Trust: 1.0
vendor:	dell	model:	precision 7960 tower	scope:	lt	version:	1.0.9	Trust: 1.0
vendor:	dell	model:	vostro 3681	scope:	lt	version:	2.21.0	Trust: 1.0
vendor:	dell	model:	xps 15 9520	scope:	lt	version:	1.16.0	Trust: 1.0
vendor:	dell	model:	inspiron 3583	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	inspiron 24 5421 all-in-one	scope:	lt	version:	1.4.0	Trust: 1.0
vendor:	dell	model:	g7 17 7790	scope:	lt	version:	1.26.0	Trust: 1.0
vendor:	dell	model:	vostro 5591	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	dell	model:	optiplex 3280 all-in-one	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	latitude 9510	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	optiplex 7410 all-in-one	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	precision 3260 xe compact	scope:	lt	version:	2.7.0	Trust: 1.0
vendor:	dell	model:	optiplex 7060	scope:	lt	version:	1.26.0	Trust: 1.0
vendor:	dell	model:	xps 13 7390 2-in-1	scope:	lt	version:	1.26.0	Trust: 1.0
vendor:	dell	model:	inspiron 3584	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	latitude 5488	scope:	lt	version:	1.31.0	Trust: 1.0
vendor:	dell	model:	precision 3240 compact	scope:	lt	version:	1.20.0	Trust: 1.0
vendor:	dell	model:	latitude 3330	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	optiplex 5260 all-in-one	scope:	lt	version:	1.28.0	Trust: 1.0
vendor:	dell	model:	precision 5520	scope:	lt	version:	1.33.0	Trust: 1.0
vendor:	dell	model:	xps 15 7590	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	inspiron 3781	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	vostro 3888	scope:	lt	version:	2.21.0	Trust: 1.0
vendor:	dell	model:	g7 15 7500	scope:	lt	version:	1.26.0	Trust: 1.0
vendor:	dell	model:	inspiron 3020 desktop	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	g5 15 5590	scope:	lt	version:	1.26.0	Trust: 1.0
vendor:	dell	model:	latitude 3140	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	vostro 3584	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	vostro 3480	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	chengming 3910	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	vostro 7590	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	latitude 5420	scope:	lt	version:	1.30.0	Trust: 1.0
vendor:	dell	model:	precision 3450	scope:	lt	version:	1.19.0	Trust: 1.0
vendor:	dell	model:	vostro 3070	scope:	lt	version:	2.32.0	Trust: 1.0
vendor:	dell	model:	latitude 5580	scope:	lt	version:	1.31.0	Trust: 1.0
vendor:	dell	model:	precision 5470	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	latitude 5300	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	dell	model:	latitude 5411	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	optiplex 7490 all-in-one	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	inspiron 5410	scope:	lt	version:	2.20.0	Trust: 1.0
vendor:	dell	model:	latitude 5310 2-in-1	scope:	lt	version:	1.20.0	Trust: 1.0
vendor:	dell	model:	latitude rugged 7220	scope:	lt	version:	1.30.0	Trust: 1.0
vendor:	dell	model:	latitude 3189	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	latitude 7300	scope:	lt	version:	1.26.0	Trust: 1.0
vendor:	dell	model:	latitude 7200 2-in-1	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	optiplex 7450	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	dell	model:	inspiron 3511	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	optiplex 5090	scope:	lt	version:	1.19.0	Trust: 1.0
vendor:	dell	model:	inspiron 5493	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	dell	model:	precision 3650 tower	scope:	lt	version:	1.24.0	Trust: 1.0
vendor:	dell	model:	latitude 3310	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	latitude 7280	scope:	lt	version:	1.32.1	Trust: 1.0
vendor:	dell	model:	inspiron 3480	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	optiplex 5000	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	latitude 3301	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	dell	model:	latitude 7210 2-in-1	scope:	lt	version:	1.23.0	Trust: 1.0
vendor:	dell	model:	optiplex 3090	scope:	lt	version:	2.14.0	Trust: 1.0
vendor:	dell	model:	vostro 3583	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	latitude 3310 2-in-1	scope:	lt	version:	1.20.0	Trust: 1.0
vendor:	dell	model:	latitude 7420	scope:	lt	version:	1.28.0	Trust: 1.0
vendor:	dell	model:	latitude 3120	scope:	lt	version:	1.19.0	Trust: 1.0
vendor:	dell	model:	latitude 5420 rugged	scope:	lt	version:	1.26.1	Trust: 1.0
vendor:	dell	model:	latitude 7230 rugged extreme tablet	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	vostro 3020 sff	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	vostro 5491	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	dell	model:	vostro 7510	scope:	lt	version:	1.17.0	Trust: 1.0
vendor:	dell	model:	inspiron 5593	scope:	lt	version:	1.27.0	Trust: 1.0
vendor:	デル	model:	chengming 3900	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	chengming 3980	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	dell g7 17 7790	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	dell g7 15 7500	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	dell g3 3500	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	dell g16 7620	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	chengming 3990	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	chengming 3901	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	alienware m16	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	alienware m18	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	dell g5 15 5590	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	precision 5680	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	g7 17 7700	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	chengming 3910	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	alienware m15 r7	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	dell g15 5520	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	chengming 3911	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	dell g5 15 5500	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	dell g7 15 7590	scope:	-	version:	-	Trust: 0.8
vendor:	デル	model:	chengming 3991	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2023-022081 // NVD: CVE-2023-28075

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2023-28075
value:	MEDIUM
Trust: 1.0
security_alert@emc.com:	CVE-2023-28075
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2023-28075
value:	MEDIUM
Trust: 0.8

nvd@nist.gov:	CVE-2023-28075
baseSeverity:	MEDIUM
baseScore:	6.3
vectorString:	CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	PHYSICAL
attackComplexity:	HIGH
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	0.4
impactScore:	5.9
version:	3.1
Trust: 1.0
security_alert@emc.com:	CVE-2023-28075
baseSeverity:	MEDIUM
baseScore:	6.9
vectorString:	CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
attackVector:	PHYSICAL
attackComplexity:	HIGH
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	0.3
impactScore:	6.0
version:	3.1
Trust: 1.0
NVD:	CVE-2023-28075
baseSeverity:	MEDIUM
baseScore:	6.3
vectorString:	CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	PHYSICAL
attackComplexity:	HIGH
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2023-022081 // NVD: CVE-2023-28075 // NVD: CVE-2023-28075

PROBLEMTYPE DATA

problemtype:	CWE-367	Trust: 1.0
problemtype:	Time-of-check Time-of-use (TOCTOU) Race condition (CWE-367) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2023-022081 // NVD: CVE-2023-28075

EXTERNAL IDS

db:	NVD	id:	CVE-2023-28075	Trust: 2.7
db:	JVNDB	id:	JVNDB-2023-022081	Trust: 0.8
db:	VULMON	id:	CVE-2023-28075	Trust: 0.1

sources: VULMON: CVE-2023-28075 // JVNDB: JVNDB-2023-022081 // NVD: CVE-2023-28075

REFERENCES

url:	https://www.dell.com/support/kbdoc/en-us/000212817/dsa-2023-152-security-update-for-a-dell-client-bios-vulnerability	Trust: 1.9
url:	https://nvd.nist.gov/vuln/detail/cve-2023-28075	Trust: 0.8
url:	https://cwe.mitre.org/data/definitions/367.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULMON: CVE-2023-28075 // JVNDB: JVNDB-2023-022081 // NVD: CVE-2023-28075

SOURCES

db:	VULMON	id:	CVE-2023-28075
db:	JVNDB	id:	JVNDB-2023-022081
db:	NVD	id:	CVE-2023-28075

LAST UPDATE DATE

2024-08-14T15:10:40.065000+00:00

SOURCES UPDATE DATE

db:	VULMON	id:	CVE-2023-28075	date:	2023-08-17T00:00:00
db:	JVNDB	id:	JVNDB-2023-022081	date:	2024-01-22T02:56:00
db:	NVD	id:	CVE-2023-28075	date:	2023-08-22T22:11:00.903

SOURCES RELEASE DATE

db:	VULMON	id:	CVE-2023-28075	date:	2023-08-16T00:00:00
db:	JVNDB	id:	JVNDB-2023-022081	date:	2024-01-22T00:00:00
db:	NVD	id:	CVE-2023-28075	date:	2023-08-16T20:15:09.427