01 Record
CVE-2023-39251
Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.
MediumPUBLISHEDCNA: dell
CNA base score6.7 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L
02 Description
Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 0.16% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 5.8% of scored records. A rank, not a probability.
- NVD base score
- 6.7 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-17.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2023-12-22 17:55Z2 YR AGO
- Last updated
- 2024-08-02 18:02Z2 YR AGO
- Reserved
- 2023-07-26
- Assigning CNA
- dell
- Record state
- PUBLISHED
- Severity
- Medium (CVSS 6.7)
- CNA CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L
- Weaknesses
- CWE-20Improper Input ValidationClass
- Data version
- 5.1
- Document digest
- d9667331c031d6a65fbbedfc9152aed824958c3f99a638ca44a67bc9c7a8958c
05 Affected products
VendorProductVersionsPlatforms
DellCPG BIOSVersions prior to 1.20.0, Versions prior to 1.23.0, Versions prior to 1.27.0, Versions prior to 1.25.0, Versions prior to 1.24.0Inspiron 7510, Inspiron 7610, Latitude 5430 Rugged Laptop, Latitude 5521, Latitude 7330 Rugged Laptop, Precision 3561, Precision 5560, Precision 5760, Precision 7560, Precision 7760, Vostro 7510, XPS 15 9510, XPS 17 9710