CVE-2023-28075

Name: CVE-2023-28075
Creator: NVD / NIST
Published: 2023-08-16T20:15:09.427+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 6.3/10EPSS 0.17%

Last modified Jun 17, 2026

CVE-2023-28075 is a medium-severity vulnerability rated 6.3/10 on the CVSS scale. Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system. . EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.

Metrics

CVSS 3.1

6.3/10

CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

0.17%

6.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-367

Affected Software

Vendor	Product	Versions
Dell	Alienware M15 R7 Firmware	< 1.18.0
Dell	Alienware M16 Firmware	< 1.10.1
Dell	Alienware M18 Firmware	< 1.10.1
Dell	Chengming 3900 Firmware	< 1.15.0
Dell	Chengming 3901 Firmware	< 1.15.0
Dell	Chengming 3910 Firmware	< 1.6.0
Dell	Chengming 3911 Firmware	< 1.6.0
Dell	Chengming 3980 Firmware	< 2.32.0
Dell	Chengming 3990 Firmware	< 1.21.0
Dell	Chengming 3991 Firmware	< 1.21.0
Dell	G15 5520 Firmware	< 1.18.0
Dell	G16 7620 Firmware	< 1.18.0
Dell	G3 3500 Firmware	< 1.26.0
Dell	G5 15 5500 Firmware	< 1.26.0
Dell	G5 15 5590 Firmware	< 1.26.0
Dell	G7 15 7500 Firmware	< 1.26.0
Dell	G7 15 7590 Firmware	< 1.26.0
Dell	G7 17 7700 Firmware	< 1.26.0
Dell	G7 17 7790 Firmware	< 1.26.0
Dell	Precision 5680 Firmware	< 1.4.1
Dell	Precision 5820 Tower Firmware	< 2.31.0
Dell	Precision 7820 Tower Firmware	< 2.35.0
Dell	Precision 7920 Tower Firmware	< 2.35.0
Dell	Edge Gateway 3000 Firmware	< 1.13.0
Dell	Edge Gateway 5000 Firmware	< 1.23.0
Dell	Embedded Box Pc 3000 Firmware	< 1.19.0
Dell	Embedded Box Pc 5000 Firmware	< 1.20.0
Dell	Inspiron 14 5410 Firmware	< 2.20.0
Dell	Inspiron 14 5418 Firmware	< 2.20.0
Dell	Inspiron 15 3511 Firmware	< 1.23.0
Dell	Inspiron 15 5510 Firmware	< 2.20.0
Dell	Inspiron 15 5518 Firmware	< 2.20.0
Dell	Inspiron 24 5420 All-In-One Firmware	< 1.4.0
Dell	Inspiron 24 5421 All-In-One Firmware	< 1.4.0
Dell	Inspiron 27 7720 All-In-One Firmware	< 1.4.0
Dell	Inspiron 3020 Small Desktop Firmware	< 1.6.0
Dell	Inspiron 3020 Desktop Firmware	< 1.6.0
Dell	Inspiron 3470 Firmware	< 2.32.0
Dell	Inspiron 3480 Firmware	< 1.25.0
Dell	Inspiron 3481 Firmware	< 1.23.0
Dell	Inspiron 3493 Firmware	< 1.27.0
Dell	Inspiron 3511 Firmware	< 1.23.0
Dell	Inspiron 3580 Firmware	< 1.25.0
Dell	Inspiron 3581 Firmware	< 1.23.0
Dell	Inspiron 3583 Firmware	< 1.25.0
Dell	Inspiron 3584 Firmware	< 1.23.0
Dell	Inspiron 3593 Firmware	< 1.27.0
Dell	Inspiron 3670 Firmware	< 2.32.0
Dell	Inspiron 3780 Firmware	< 1.25.0
Dell	Inspiron 3781 Firmware	< 1.23.0

Showing 50 of 242 affected configurations. See NVD for the full list.

References

Timeline

Published: Aug 16, 2023
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2023-28075?

How severe is CVE-2023-28075?

CVE-2023-28075 has a CVSS score of 6.3/10 (MEDIUM severity). The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.

How do I fix CVE-2023-28075?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-28075?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST