Dell Client Platform update for BIOS

1) Sequence of processor instructions leads to unexpected behavior

EUVDB-ID: #VU82351

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-23583

CWE-ID: CWE-1281 - Sequence of Processor Instructions Leads to Unexpected Behavior

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to an error related to processing of Sequence of processor instructions. A local user can execute arbitrary code with elevated privileges.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

XPS 8960: before 1.4.0

XPS 13 9300: before 1.21.0

XPS 13 7390 2-in-1: before 1.28.0

Vostro 5890: before 1.21.1

Vostro 3890: before 1.21.1

Vostro 3690: before 1.21.1

Vostro 3520: before 1.20.0

Vostro 3420: before 1.20.0

Precision 5680: before 1.7.0

Precision 3660: before 2.9.3

Precision 3650 Tower: before 1.27.1

Precision 3581: before 1.8.1

Precision 3580: before 1.8.1

Precision 3480: before 1.9.1

OptiPlex Tower 7010 / OptiPlex Tower Plus 7010: before 1.8.0

OptiPlex Small Form Factor 7010 / OptiPlex Small Form Factor Plus 7010: before 1.10.0

OptiPlex Micro 7010 / OptiPlex Micro Plus 7010: before 1.8.0

Optiplex 7090 Ultra: before 1.24.0

OptiPlex 7090 Tower: before 1.21.1

OptiPlex 5090 Tower: before 1.21.1

OptiPlex 5090 Small Form Factor: before 1.21.1

OptiPlex 5090 Micro: before 1.21.1

OptiPlex 3090 Ultra: before 1.24.0

Latitude 9440 2-in-1: before 1.6.1

Latitude 9430: before 1.19.2

Latitude 7640: before 1.9.1

Latitude 7440: before 1.9.1

Latitude 7340: before 1.9.1

Latitude 7330 Rugged Laptop: before 1.23.0

Latitude 7030 Rugged Extreme: before 1.1.1

Latitude 5540: before 1.8.1

Latitude 5430 Rugged Laptop: before 1.23.0

Latitude 5340: before 1.8.1

Latitude 3330: before 1.19.0

Inspiron 5593: before 1.28.0

Inspiron 5493: before 1.28.0

Inspiron 5401 All-in-One: before 1.23.1

Inspiron 3891: before 1.21.1

Inspiron 3793: before 1.28.0

Inspiron 3593: before 1.28.0

Inspiron 3493: before 1.28.0

Inspiron 24 5411 All-in-One: before Inspiron 24 5420 All-in-One

Inspiron 15 5510/5518: before 2.22.1

Inspiron 15 3520: before 1.20.0

Inspiron 14 5410/5418: before 2.22.1

Inspiron 13 5330: before 1.10.1

ChengMing 3910/3911: before 1.8.0

AURORA R16: before 2.3.9

Alienware Aurora R12: before 1.1.23

Precision 3260 Compact: before Precision 3450

XPS 9720: before 1.20.0

XPS 9530: before 1.8.0

XPS 9520: before 1.18.0

XPS 9315 2-in-1: before 1.11.0

XPS 8950: before 1.15.0

XPS 8940: before 2.15.1

XPS 17 9730: before 1.7.0

XPS 17 9710: before 1.23.1

XPS 15 9510: before 1.25.0

XPS 13 Plus 9320: before 2.7.0

XPS 13 9315: before 1.15.0

XPS 13 9310 2-in-1: before 2.21.0

XPS 13 9310: before 3.19.1

XPS 13 9305: before 1.18.0

Vostro 7620: before 1.18.0

Vostro 7510: before 1.19.1

Vostro 5620: before 1.17.0

Vostro 5510: before 2.22.1

Vostro 5502: before 1.27.0

Vostro 5410: before 2.22.1

Vostro 5402: before 1.27.0

Vostro 5320: before 1.14.0

Vostro 5310: before 2.23.1

Vostro 5301: before 1.30.0

Vostro 3910: before 1.17.0

Vostro 3710: before 1.17.0

Vostro 3510: before 1.25.1

Vostro 3501: before 1.27.1

Vostro 3500: before 1.27.1

Vostro 3401: before 1.27.1

Vostro 3400: before 1.27.1

Vostro 3020 Tower Desktop: before 1.8.0

Vostro 3020 Small Desktop: before 1.8.0

Vostro 16 5630: before 1.9.0

Vostro 15 3530: before 1.6.0

Vostro 15 3510: before 1.25.1

Vostro 14 3430: before 1.6.0

Precision 7780: before 1.7.0

Precision 7770: before 1.16.0

Precision 7760: before 1.27.0

Precision 7680: before 1.7.0

Precision 7670: before 1.16.0

Precision 7560: before 1.27.0

Precision 5770: before 1.20.0

Precision 5760: before 1.23.1

Precision 5570: before 1.18.0

Precision 5560: before 1.25.0

Precision 5480: before 1.7.0

Precision 5470: before 1.17.0

Precision 3571: before 1.18.0

Precision 3570: before 1.17.1

Precision 3561: before 1.26.2

Precision 3560: before 1.32.1

Precision 3470: before 1.17.0

Precision 3460 Small Form Factor: before 2.9.1

Precision 3460 XE Small Form Factor: before 2.9.1

Precision 3260 XE Compact: before 2.9.1

OptiPlex XE4 Tower: before 1.17.0

OptiPlex All-in-One 7410: before 1.8.0

OptiPlex 7490 All-in-One: before 1.25.2

OptiPlex 7400 All-In-One: before 1.1.34

OptiPlex 7000 Small Form Factor: before 1.17.0

OptiPlex 7000 Tower: before 1.17.0

OptiPlex 7000 XE Micro: before 1.17.0

OptiPlex 7000 Micro: before 1.17.0

OptiPlex 5490 All-In-One: before 1.25.2

OptiPlex 5400 All-In-One: before 1.1.34

OptiPlex 5000 Small Form Factor: before 1.17.0

OptiPlex 5000 Tower: before 1.17.0

OptiPlex 5000 Micro: before 1.17.0

OptiPlex 3000 Tower: before 1.17.0

OptiPlex 3000 Small Form Factor: before 1.17.0

OptiPlex 3000 Micro: before 1.17.0

Latitude 5421: before 1.25.1

Latitude 9520: before 1.26.1

Latitude 9420: before 1.25.1

Latitude 9330: before 1.15.0

Latitude 7530: before 1.18.0

Latitude 7520: before 1.30.1

Latitude 7430: before 1.18.0

Latitude 7420: before 1.30.1

Latitude 7330: before 1.18.0

Latitude 7320 Detachable: before 1.26.1

Latitude 7320: before 1.30.1

Latitude 7230 Rugged Extreme: before 1.10.1

Latitude 5531: before 1.18.0

Latitude 5530: before 1.17.1

Latitude 5521: before 1.26.2

Latitude 5520: before 1.32.1

Latitude 5440: before 1.10.0

Latitude 5431: before 1.17.0

Latitude 5430: before 1.17.1

Latitude 5420: before 1.32.1

Latitude 5330: before 1.17.0

Latitude 5320: before 1.32.1

Latitude 3540: before 1.8.0

Latitude 3530: before 1.14.0

Latitude 3520: before 1.32.1

Latitude 3440: before 1.8.0

Latitude 3430: before 1.14.0

Latitude 3420: before 1.32.1

Latitude 3340: before 1.8.1

Latitude 3320: before 1.25.1

Inspiron 7706 2-in-1: before 1.27.0

Inspiron 7700 All-In-One: before 1.23.1

Inspiron 7610: before 1.19.1

Inspiron 7510: before 1.19.1

Inspiron 7506 2-in-1: before 1.27.0

Inspiron 7400: before 1.30.0

Inspiron 7306 2-in-1: before 1.27.0

Inspiron 7300: before 1.30.0

Inspiron 5620: before 1.17.0

Inspiron 5509: before 1.27.0

Inspiron 5502: before 1.27.0

Inspiron 5420: before 1.17.0

Inspiron 5410: before 2.22.1

Inspiron 5409: before 1.27.0

Inspiron 5406 2-in-1: before 1.27.0

Inspiron 5402: before 1.27.0

Inspiron 5400: before 1.23.1

Inspiron 5320: before 1.14.0

Inspiron 5310: before 2.23.1

Inspiron 5301: before 1.30.0

Inspiron 3910: before 1.17.0

Inspiron 3511: before 1.25.1

Inspiron 3501: before 1.27.1

Inspiron 3020 Small Desktop: before 1.8.0

Inspiron 3020 Desktop: before 1.8.0

Inspiron 27 7720 All-in-One: before 1.6.0

Inspiron 27 7710 All-in-One: before 1.16.1

Inspiron 24 5410 All-in-One: before 1.16.1

Inspiron 16 Plus 7630: before 1.10.0

Inspiron 16 Plus 7620: before 1.18.0

Inspiron 16 7630 2-in-1: before 1.9.0

Inspiron 16 7620 2-in-1: before 1.15.0

Inspiron 16 5630: before 1.9.0

Inspiron 15 3530: before 1.6.0

Inspiron 15 3511: before 1.25.1

Inspiron 14 Plus 7430: before 1.10.0

Inspiron 14 Plus 7420: before 1.18.0

Inspiron 14 7430 2-in-1: before 1.9.0

Inspiron 14 7420 2-in-1: before 1.15.0

Inspiron 14 5430: before 1.9.0

Dell G16 7630: before 1.8.0

Dell G16 7620: before 1.20.0

Dell G15 5530: before 1.8.0

Dell G15 5520: before 1.20.0

Dell G15 5511: before 1.24.1

ChengMing 3900: before 1.17.0

Alienware x17 R2: before 1.16.0

Alienware x17 R1: before 1.20.0

Alienware x16 R1: before 1.9.1

Alienware x15 R2: before 1.16.0

Alienware x15 R1: before 1.20.0

Alienware x14 R2: before 1.9.1

Alienware x14: before 1.14.0

Alienware m18 R1: before 1.12.1

Alienware m16 R1: before 1.12.1

Alienware m15 R7: before 1.20.0

Alienware m15 R6: before 1.25.1

Alienware Aurora R15: before 1.7.0

Alienware Aurora R13: before 1.16.0

External links

http://www.dell.com/support/kbdoc/nl-nl/000217957/dsa-2023-359-security-update-for-2024-1-ipu-oob-intel-processor-advisory

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.