CVE-2023-28075: Dell Alienware m15 r7 Firmware

Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.

Affected products

Dell Alienware m15 r7 Firmware: before 1.18.0 (fixed in 1.18.0)
Dell Alienware m16 Firmware: before 1.10.1 (fixed in 1.10.1)
Dell Alienware m18 Firmware: before 1.10.1 (fixed in 1.10.1)
Dell Chengming 3900 Firmware: before 1.15.0 (fixed in 1.15.0)
Dell Chengming 3901 Firmware: before 1.15.0 (fixed in 1.15.0)
Dell Chengming 3910 Firmware: before 1.6.0 (fixed in 1.6.0)
Dell Chengming 3911 Firmware: before 1.6.0 (fixed in 1.6.0)
Dell Chengming 3980 Firmware: before 2.32.0 (fixed in 2.32.0)
Dell Chengming 3990 Firmware: before 1.21.0 (fixed in 1.21.0)
Dell Chengming 3991 Firmware: before 1.21.0 (fixed in 1.21.0)
Dell Edge Gateway 3000 Firmware: before 1.13.0 (fixed in 1.13.0)
Dell Edge Gateway 5000 Firmware: before 1.23.0 (fixed in 1.23.0)
Dell Embedded Box Pc 3000 Firmware: before 1.19.0 (fixed in 1.19.0)
Dell Embedded Box Pc 5000 Firmware: before 1.20.0 (fixed in 1.20.0)
Dell g15 5520 Firmware: before 1.18.0 (fixed in 1.18.0)
Dell g16 7620 Firmware: before 1.18.0 (fixed in 1.18.0)
Dell g3 3500 Firmware: before 1.26.0 (fixed in 1.26.0)
Dell g5 15 5500 Firmware: before 1.26.0 (fixed in 1.26.0)
Dell g5 15 5590 Firmware: before 1.26.0 (fixed in 1.26.0)
Dell g7 15 7500 Firmware: before 1.26.0 (fixed in 1.26.0)
Dell g7 15 7590 Firmware: before 1.26.0 (fixed in 1.26.0)
Dell g7 17 7700 Firmware: before 1.26.0 (fixed in 1.26.0)
Dell g7 17 7790 Firmware: before 1.26.0 (fixed in 1.26.0)
Dell Inspiron 14 5410 Firmware: before 2.20.0 (fixed in 2.20.0)
Dell Inspiron 14 5418 Firmware: before 2.20.0 (fixed in 2.20.0)
and 217 more

Published 2023-08-16. Last modified 2026-06-17.