CVE-2023-32453: Dell Alienware m15 r7 Firmware

Low severity, CVSS 3.9. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may potentially exploit this vulnerability in order to modify a security-critical UEFI variable without knowledge of the BIOS administrator.

Affected products

Dell Alienware m15 r7 Firmware: before 1.18.0 (fixed in 1.18.0)
Dell Alienware m16 Firmware: before 1.10.1 (fixed in 1.10.1)
Dell Alienware m18 Firmware: before 1.10.1 (fixed in 1.10.1)
Dell Chengming 3900 Firmware: before 1.15.0 (fixed in 1.15.0)
Dell Chengming 3901 Firmware: before 1.15.0 (fixed in 1.15.0)
Dell Chengming 3910 Firmware: before 1.6.0 (fixed in 1.6.0)
Dell Chengming 3911 Firmware: before 1.6.0 (fixed in 1.6.0)
Dell g15 5520 Firmware: before 1.18.0 (fixed in 1.18.0)
Dell g16 7620 Firmware: before 1.18.0 (fixed in 1.18.0)
Dell g3 3500 Firmware: before 1.26.0 (fixed in 1.26.0)
Dell g5 15 5500 Firmware: before 1.26.0 (fixed in 1.26.0)
Dell g7 15 7500 Firmware: before 1.26.0 (fixed in 1.26.0)
Dell g7 17 7700 Firmware: before 1.26.0 (fixed in 1.26.0)
Dell Inspiron 14 5410 Firmware: before 2.20.0 (fixed in 2.20.0)
Dell Inspiron 14 5418 Firmware: before 2.20.0 (fixed in 2.20.0)
Dell Inspiron 15 3511 Firmware: before 1.23.0 (fixed in 1.23.0)
Dell Inspiron 15 5510 Firmware: before 2.20.0 (fixed in 2.20.0)
Dell Inspiron 15 5518 Firmware: before 2.20.0 (fixed in 2.20.0)
Dell Inspiron 24 5420 All-In-One Firmware: before 1.4.0 (fixed in 1.4.0)
Dell Inspiron 24 5421 All-In-One Firmware: before 1.4.0 (fixed in 1.4.0)
Dell Inspiron 27 7720 All-In-One Firmware: before 1.4.0 (fixed in 1.4.0)
Dell Inspiron 3020 Desktop Firmware: before 1.6.0 (fixed in 1.6.0)
Dell Inspiron 3020 Small Desktop Firmware: up to and including 1.6.0
Dell Inspiron 3493 Firmware: before 1.27.0 (fixed in 1.27.0)
Dell Inspiron 3511 Firmware: before 1.23.0 (fixed in 1.23.0)
and 86 more

Published 2023-08-16. Last modified 2026-06-17.