CVE-2023-28063

Home/CVE/Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin

CVE

Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin

Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.

MEDIUM · CVSS 6.7 EPSS 0.00013

Monitor

No active-exploitation, high-EPSS, or public-exploit signals - routine patching cadence

Sigma rules0 YARA rules0

⬡

Weakness Classification

CWE-195Signed to Unsigned Conversion Error

CWE-681Incorrect Conversion between Numeric Types

▤

Affected Products & Versions

dell optiplex 3000 micro firmwareall versions
dell optiplex 3000 small form factor firmwareall versions
dell optiplex 3000 tower firmwareall versions
dell optiplex 5000 micro firmwareall versions
dell optiplex 5000 small form factor firmwareall versions
dell optiplex 5000 tower firmwareall versions
dell optiplex 7000 micro firmwareall versions
dell optiplex 7000 small form factor firmwareall versions
Show all 60 affected productsdell optiplex 7000 tower firmwareall versions
dell optiplex 7000 xe micro firmwareall versions
dell optiplex 5090 micro firmwareall versions
dell optiplex 5090 small form factor firmwareall versions
dell optiplex 5090 tower firmwareall versions
dell optiplex micro 7010 firmwareall versions
dell optiplex micro plus 7010 firmwareall versions
dell optiplex small form factor 7010 firmwareall versions
dell optiplex small form factor plus 7010 firmwareall versions
dell optiplex tower 7010 firmwareall versions
dell optiplex tower plus 7010 firmwareall versions
dell optiplex xe4 firmwareall versions
dell optiplex xe4 oemready firmwareall versions
dell precision 3260 xe compact firmwareall versions
dell precision 3260 compact firmwareall versions
dell precision 3460 xe small form factor firmwareall versions
dell precision 3460 small form factor firmwareall versions
dell alienware m15 r6 firmwareall versions
dell alienware m15 r7 firmwareall versions
dell chengming 3901 firmwareall versions
dell chengming 3900 firmwareall versions
dell chengming 3911 firmwareall versions
dell chengming 3910 firmwareall versions
dell chengming 3990 firmwareall versions
dell chengming 3991 firmwareall versions
dell g15 5510 firmwareall versions
dell g15 5511 firmwareall versions
dell g15 5520 firmwareall versions
dell g3 3500 firmwareall versions
dell g5 15 5590 firmwareall versions
dell g5 5000 firmwareall versions
dell g7 15 7500 firmwareall versions
dell g7 15 7590 firmwareall versions
dell g7 17 7700 firmwareall versions
dell g7 17 7790 firmwareall versions
dell inspiron 13 5320 firmwareall versions
dell inspiron 14 5418 firmwareall versions
dell inspiron 14 5410 firmwareall versions
dell inspiron 14 5420 firmwareall versions
dell inspiron 14 7420 2-in-1 firmwareall versions
dell inspiron 14 plus 7420 firmwareall versions
dell inspiron 15 3511 firmwareall versions
dell inspiron 15 5510 firmwareall versions
dell inspiron 15 5518 firmwareall versions
dell inspiron 16 7620 2-in-1 firmwareall versions
dell inspiron 16 plus 7620 firmwareall versions
dell inspiron 24 5410 all-in-one firmwareall versions
dell inspiron 24 5411 all-in-one firmwareall versions
dell inspiron 27 7710 all-in-one firmwareall versions
dell inspiron 3020 small desktop firmwareall versions
dell inspiron 3020 desktop firmwareall versions
dell inspiron 3490 firmwareall versions

▣

Scoring & Timeline

6.7

MEDIUM · CVSS v3.1 · security_alert@emc.com

View on NVD

Attack Vector

Network Adjacent Local Physical

Attack Complexity

Low High

Privileges Required

None Low High

User Interaction

None Required

Scope

Unchanged Changed

Confidentiality

None Low High

Integrity

None Low High

Availability

None Low High

Published to NVD06 Feb 2024 · 08:15 AM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC triage · cisa-vulnrichment

Exploitation

none

Automatable

Technical impact

partial

SSVC asks the questions that actually drive patch urgency: is it being exploited, can attacks be automated, and how total is the impact.

🔗

References & Sources

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

https://www.dell.com/support/kbdoc/en-us/000214780/dsa-2023-176-dell-client-bios-security-update-for-a-signed-to-unsigned-conversion-error-vulnerabilityVendor Advisory

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin