Is CVE-2023-32475 in the CISA KEV catalog?

No. CVE-2023-32475 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2023-32475?

CVE-2023-32475 has a CVSS v3 base score of 7.6 (HIGH).

What is the EPSS score for CVE-2023-32475?

CVE-2023-32475 has an EPSS score of 0.17% (6th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2023-32475?

Upgrade alienware aurora r10 firmware to 2.6.0 or later. Fixes are available for 40 affected products.

CVE & CISA-KEV Catalog

CVE-2023-32475

HIGH

7.6

CVSS v3

NVD

Description

Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.

CWE-353

How to fix

Remediation Available

alienware aurora r10 firmwareNVD

Affected:< 2.6.0Fixed in:2.6.0CVE-2023-32475derived from NVD

alienware aurora r15 amd firmwareNVD

Affected:< 1.13.0Fixed in:1.13.0CVE-2023-32475derived from NVD

alienware aurora ryzen edition r14 firmwareNVD

Affected:< 2.16.0Fixed in:2.16.0CVE-2023-32475derived from NVD

alienware m15 r7 amd firmwareNVD

Affected:< 1.15.0Fixed in:1.15.0CVE-2023-32475derived from NVD

alienware m15 ryzen edition r5 firmwareNVD

Affected:< 1.16.0Fixed in:1.16.0CVE-2023-32475derived from NVD

alienware m16 r1 amd firmwareNVD

Affected:< 1.9.0Fixed in:1.9.0CVE-2023-32475derived from NVD

alienware m17 r5 amd firmwareNVD

Affected:< 1.15.0Fixed in:1.15.0CVE-2023-32475derived from NVD

alienware m18 firmwareNVD

Affected:< 1.9.0Fixed in:1.9.0CVE-2023-32475derived from NVD

g15 5515 firmwareNVD

Affected:< 1.15.0Fixed in:1.15.0CVE-2023-32475derived from NVD

g15 5525 firmwareNVD

Affected:< 1.15.0Fixed in:1.15.0CVE-2023-32475derived from NVD

g15 5535 firmwareNVD

Affected:< 1.5.0Fixed in:1.5.0CVE-2023-32475derived from NVD

g5 5505 firmwareNVD

Affected:< 1.18.0Fixed in:1.18.0CVE-2023-32475derived from NVD

inspiron 14 5425 firmwareNVD

Affected:< 1.13.0Fixed in:1.13.0CVE-2023-32475derived from NVD

inspiron 14 5435 firmwareNVD

Affected:< 1.8.0Fixed in:1.8.0CVE-2023-32475derived from NVD

inspiron 14 7425 2-in-1 firmwareNVD

Affected:< 1.13.0Fixed in:1.13.0CVE-2023-32475derived from NVD

inspiron 14 7435 2-in-1 firmwareNVD

Affected:< 1.8.0Fixed in:1.8.0CVE-2023-32475derived from NVD

inspiron 15 3515 firmwareNVD

Affected:< 1.16.0Fixed in:1.16.0CVE-2023-32475derived from NVD

inspiron 15 3525 firmwareNVD

Affected:< 1.15.1Fixed in:1.15.1CVE-2023-32475derived from NVD

inspiron 15 3535 firmwareNVD

Affected:< 1.12.0Fixed in:1.12.0CVE-2023-32475derived from NVD

inspiron 16 5625 firmwareNVD

Affected:< 1.13.0Fixed in:1.13.0CVE-2023-32475derived from NVD

inspiron 16 5635 firmwareNVD

Affected:< 1.8.0Fixed in:1.8.0CVE-2023-32475derived from NVD

inspiron 16 7635 2-in-1 firmwareNVD

Affected:< 1.8.0Fixed in:1.8.0CVE-2023-32475derived from NVD

inspiron 24 5415 all-in-one firmwareNVD

Affected:< 1.17.0Fixed in:1.17.0CVE-2023-32475derived from NVD

inspiron 3505 firmwareNVD

Affected:< 1.16.0Fixed in:1.16.0CVE-2023-32475derived from NVD

inspiron 5405 firmwareNVD

Affected:< 1.14.0Fixed in:1.14.0CVE-2023-32475derived from NVD

inspiron 5415 firmwareNVD

Affected:< 1.19.0Fixed in:1.19.0CVE-2023-32475derived from NVD

inspiron 5505 firmwareNVD

Affected:< 1.14.0Fixed in:1.14.0CVE-2023-32475derived from NVD

inspiron 5515 firmwareNVD

Affected:< 1.19.0Fixed in:1.19.0CVE-2023-32475derived from NVD

inspiron 7405 2-in-1 firmwareNVD

Affected:< 1.15.0Fixed in:1.15.0CVE-2023-32475derived from NVD

inspiron 7415 2-in-1 firmwareNVD

Affected:< 1.19.0Fixed in:1.19.0CVE-2023-32475derived from NVD

vostro 14 3425 firmwareNVD

Affected:< 1.15.1Fixed in:1.15.1CVE-2023-32475derived from NVD

vostro 14 3435 firmwareNVD

Affected:< 1.12.0Fixed in:1.12.0CVE-2023-32475derived from NVD

vostro 15 3515 firmwareNVD

Affected:< 1.16.0Fixed in:1.16.0CVE-2023-32475derived from NVD

vostro 15 3525 firmwareNVD

Affected:< 1.15.1Fixed in:1.15.1CVE-2023-32475derived from NVD

vostro 15 3535 firmwareNVD

Affected:< 1.12.0Fixed in:1.12.0CVE-2023-32475derived from NVD

vostro 16 5635 firmwareNVD

Affected:< 1.8.0Fixed in:1.8.0CVE-2023-32475derived from NVD

vostro 3405 firmwareNVD

Affected:< 1.16.0Fixed in:1.16.0CVE-2023-32475derived from NVD

vostro 5415 firmwareNVD

Affected:< 1.19.0Fixed in:1.19.0CVE-2023-32475derived from NVD

vostro 5515 firmwareNVD

Affected:< 1.19.0Fixed in:1.19.0CVE-2023-32475derived from NVD

vostro 5625 firmwareNVD

Affected:< 1.13.0Fixed in:1.13.0CVE-2023-32475derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorPhysical

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeChanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploit Intelligence

0.17%probability of exploitation in 30 days

6thpercentile

Low risk: more likely to be exploited than 6% of all known CVEs.

References

Vendor Advisory1

dell.com

Embed a live status badge for CVE-2023-32475

Markdown

[![CVE-2023-32475](https://tridentstack.com/cve/badge/CVE-2023-32475.svg)](https://tridentstack.com/cve/CVE-2023-32475)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-32475"><img src="https://tridentstack.com/cve/badge/CVE-2023-32475.svg" alt="CVE-2023-32475"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.