Is CVE-2023-28064 in the CISA KEV catalog?

No. CVE-2023-28064 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2023-28064?

CVE-2023-28064 has a CVSS v3 base score of 3.5 (LOW).

What is the EPSS score for CVE-2023-28064?

CVE-2023-28064 has an EPSS score of 0.26% (18th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2023-28064?

Upgrade alienware m15 r6 firmware to 1.22.1 or later. Fixes are available for 70 affected products.

CVE & CISA-KEV Catalog

CVE-2023-28064

LOW

3.5

CVSS v3

NVD

Description

Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.

CWE-787Out-of-bounds Write

How to fix

Remediation Available

alienware m15 r6 firmwareNVD

Affected:< 1.22.1Fixed in:1.22.1CVE-2023-28064derived from NVD

alienware m15 r7 firmwareNVD

Affected:< 1.17.0Fixed in:1.17.0CVE-2023-28064derived from NVD

chengming 3900 firmwareNVD

Affected:< 1.13.0Fixed in:1.13.0CVE-2023-28064derived from NVD

chengming 3901 firmwareNVD

Affected:< 1.13.0Fixed in:1.13.0CVE-2023-28064derived from NVD

g15 5510 firmwareNVD

Affected:< 1.19.0Fixed in:1.19.0CVE-2023-28064derived from NVD

g15 5511 firmwareNVD

Affected:< 1.22.1Fixed in:1.22.1CVE-2023-28064derived from NVD

g15 5520 firmwareNVD

Affected:< 1.17.0Fixed in:1.17.0CVE-2023-28064derived from NVD

inspiron 14 5410 firmwareNVD

Affected:< 2.19.1Fixed in:2.19.1CVE-2023-28064derived from NVD

inspiron 14 5418 firmwareNVD

Affected:< 2.19.1Fixed in:2.19.1CVE-2023-28064derived from NVD

inspiron 14 plus 7420 firmwareNVD

Affected:< 1.13.0Fixed in:1.13.0CVE-2023-28064derived from NVD

inspiron 15 3511 firmwareNVD

Affected:< 1.22.1Fixed in:1.22.1CVE-2023-28064derived from NVD

inspiron 15 5510 firmwareNVD

Affected:< 2.19.1Fixed in:2.19.1CVE-2023-28064derived from NVD

inspiron 15 5518 firmwareNVD

Affected:< 2.19.1Fixed in:2.19.1CVE-2023-28064derived from NVD

inspiron 16 7620 2-in-1 firmwareNVD

Affected:< 1.12.1Fixed in:1.12.1CVE-2023-28064derived from NVD

inspiron 16 plus 7620 firmwareNVD

Affected:< 1.13.0Fixed in:1.13.0CVE-2023-28064derived from NVD

inspiron 3511 firmwareNVD

Affected:< 1.22.1Fixed in:1.22.1CVE-2023-28064derived from NVD

inspiron 3520 firmwareNVD

Affected:< 1.15.0Fixed in:1.15.0CVE-2023-28064derived from NVD

inspiron 3891 firmwareNVD

Affected:< 1.18.1Fixed in:1.18.1CVE-2023-28064derived from NVD

inspiron 3910 firmwareNVD

Affected:< 1.13.0Fixed in:1.13.0CVE-2023-28064derived from NVD

inspiron 5310 firmwareNVD

Affected:< 2.20.1Fixed in:2.20.1CVE-2023-28064derived from NVD

inspiron 5320 firmwareNVD

Affected:< 1.11.1Fixed in:1.11.1CVE-2023-28064derived from NVD

inspiron 5410 firmwareNVD

Affected:< 2.19.1Fixed in:2.19.1CVE-2023-28064derived from NVD

inspiron 5420 firmwareNVD

Affected:< 1.14.1Fixed in:1.14.1CVE-2023-28064derived from NVD

inspiron 5620 firmwareNVD

Affected:< 1.14.1Fixed in:1.14.1CVE-2023-28064derived from NVD

inspiron 7420 firmwareNVD

Affected:< 1.12.1Fixed in:1.12.1CVE-2023-28064derived from NVD

inspiron 7510 firmwareNVD

Affected:< 1.16.1Fixed in:1.16.1CVE-2023-28064derived from NVD

inspiron 7610 firmwareNVD

Affected:< 1.16.1Fixed in:1.16.1CVE-2023-28064derived from NVD

latitude 3120 firmwareNVD

Affected:< 1.17.2Fixed in:1.17.2CVE-2023-28064derived from NVD

latitude 3320 firmwareNVD

Affected:< 1.22.2Fixed in:1.22.2CVE-2023-28064derived from NVD

latitude 3330 firmwareNVD

Affected:< 1.13.0Fixed in:1.13.0CVE-2023-28064derived from NVD

latitude 3420 firmwareNVD

Affected:< 1.29.0Fixed in:1.29.0CVE-2023-28064derived from NVD

latitude 3430 firmwareNVD

Affected:< 1.10.1Fixed in:1.10.1CVE-2023-28064derived from NVD

latitude 3520 firmwareNVD

Affected:< 1.29.0Fixed in:1.29.0CVE-2023-28064derived from NVD

latitude 3530 firmwareNVD

Affected:< 1.10.1Fixed in:1.10.1CVE-2023-28064derived from NVD

latitude 5320 firmwareNVD

Affected:< 1.28.1Fixed in:1.28.1CVE-2023-28064derived from NVD

latitude 5330 firmwareNVD

Affected:< 1.13.1Fixed in:1.13.1CVE-2023-28064derived from NVD

latitude 5520 firmwareNVD

Affected:< 1.28.1Fixed in:1.28.1CVE-2023-28064derived from NVD

latitude 5530 firmwareNVD

Affected:< 1.13.2Fixed in:1.13.2CVE-2023-28064derived from NVD

latitude 5531 firmwareNVD

Affected:< 1.14.1Fixed in:1.14.1CVE-2023-28064derived from NVD

latitude 7330 firmwareNVD

Affected:< 1.14.1Fixed in:1.14.1CVE-2023-28064derived from NVD

latitude 7430 firmwareNVD

Affected:< 1.14.1Fixed in:1.14.1CVE-2023-28064derived from NVD

latitude 7530 firmwareNVD

Affected:< 1.14.1Fixed in:1.14.1CVE-2023-28064derived from NVD

latitude rugged 5430 firmwareNVD

Affected:< 1.18.1Fixed in:1.18.1CVE-2023-28064derived from NVD

latitude rugged 7330 firmwareNVD

Affected:< 1.18.1Fixed in:1.18.1CVE-2023-28064derived from NVD

optiplex 3000 firmwareNVD

Affected:< 1.13.1Fixed in:1.13.1CVE-2023-28064derived from NVD

optiplex 5000 firmwareNVD

Affected:< 1.13.1Fixed in:1.13.1CVE-2023-28064derived from NVD

optiplex 5400 firmwareNVD

Affected:< 1.1.28Fixed in:1.1.28CVE-2023-28064derived from NVD

optiplex 7000 firmwareNVD

Affected:< 1.13.1Fixed in:1.13.1CVE-2023-28064derived from NVD

optiplex 7000 oem firmwareNVD

Affected:< 1.13.1Fixed in:1.13.1CVE-2023-28064derived from NVD

optiplex 7400 firmwareNVD

Affected:< 1.1.28Fixed in:1.1.28CVE-2023-28064derived from NVD

optiplex 7410 all-in-one firmwareNVD

Affected:< 1.4.1Fixed in:1.4.1CVE-2023-28064derived from NVD

precision 3560 firmwareNVD

Affected:< 1.28.1Fixed in:1.28.1CVE-2023-28064derived from NVD

precision 3570 firmwareNVD

Affected:< 1.13.2Fixed in:1.13.2CVE-2023-28064derived from NVD

precision 3571 firmwareNVD

Affected:< 1.14.1Fixed in:1.14.1CVE-2023-28064derived from NVD

precision 5760 firmwareNVD

Affected:< 1.20.1Fixed in:1.20.1CVE-2023-28064derived from NVD

precision 5770 firmwareNVD

Affected:< 1.17.1Fixed in:1.17.1CVE-2023-28064derived from NVD

vostro 3420 firmwareNVD

Affected:< 1.15.0Fixed in:1.15.0CVE-2023-28064derived from NVD

vostro 3510 firmwareNVD

Affected:< 1.22.1Fixed in:1.22.1CVE-2023-28064derived from NVD

vostro 3520 firmwareNVD

Affected:< 1.15.0Fixed in:1.15.0CVE-2023-28064derived from NVD

vostro 3910 firmwareNVD

Affected:< 1.13.0Fixed in:1.13.0CVE-2023-28064derived from NVD

vostro 5310 firmwareNVD

Affected:< 2.20.1Fixed in:2.20.1CVE-2023-28064derived from NVD

vostro 5320 firmwareNVD

Affected:< 1.11.1Fixed in:1.11.1CVE-2023-28064derived from NVD

vostro 5410 firmwareNVD

Affected:< 2.19.1Fixed in:2.19.1CVE-2023-28064derived from NVD

vostro 5510 firmwareNVD

Affected:< 2.19.1Fixed in:2.19.1CVE-2023-28064derived from NVD

vostro 5620 firmwareNVD

Affected:< 1.14.1Fixed in:1.14.1CVE-2023-28064derived from NVD

vostro 7510 firmwareNVD

Affected:< 1.16.1Fixed in:1.16.1CVE-2023-28064derived from NVD

vostro 7620 firmwareNVD

Affected:< 1.13.0Fixed in:1.13.0CVE-2023-28064derived from NVD

xps 13 9315 2-in-1 firmwareNVD

Affected:< 1.8.1Fixed in:1.8.1CVE-2023-28064derived from NVD

xps 17 9710 firmwareNVD

Affected:< 1.20.1Fixed in:1.20.1CVE-2023-28064derived from NVD

xps 17 9720 firmwareNVD

Affected:< 1.17.1Fixed in:1.17.1CVE-2023-28064derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorPhysical

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityLow

IntegrityLow

AvailabilityNone

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploit Intelligence

0.26%probability of exploitation in 30 days

18thpercentile

Low risk: more likely to be exploited than 18% of all known CVEs.

References

Vendor Advisory1

dell.com

Related Vulnerabilities

Other CWE-787 (Out-of-bounds Write) vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2025-22457	Critical	9.0	100%	KEV + Ransom	Fix
CVE-2025-0282	Critical	9.0	100%	KEV + Ransom	-
CVE-2015-3113	Critical	9.8	100%	KEV	Fix
CVE-2021-20038	Critical	9.8	100%	KEV + Ransom	-
CVE-2023-4863	High	8.8	100%	KEV	Fix
CVE-2020-16040	Medium	6.5	100%	-	Fix

Embed a live status badge for CVE-2023-28064

Markdown

[![CVE-2023-28064](https://tridentstack.com/cve/badge/CVE-2023-28064.svg)](https://tridentstack.com/cve/CVE-2023-28064)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-28064"><img src="https://tridentstack.com/cve/badge/CVE-2023-28064.svg" alt="CVE-2023-28064"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.