Input validation error in Aptio V - CVE-2023-39537

Vulnerability identifier: #VU83168

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-39537

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of user-supplied input within the UEFI/BIOS firmware. A local user can escalate privileges on the system.

Aptio V
Alienware Aurora R11
Alienware Aurora R12
XPS 8960
Alienware Aurora R15
Alienware Aurora R15 AMD
Inspiron 15 3521
PowerEdge T40
Alienware x14
Inspiron 3502
Alienware Aurora R13
Dell G5 5000
Alienware x15 R2
Alienware x17 R2
Inspiron 3510
Inspiron 3280
Alienware m15 R4
Alienware m17 R4
ChengMing 3988
Vostro 3671
Inspiron 3471
Vostro 3471
Inspiron 3671
Alienware x17 R1
Alienware x15 R1
Inspiron 3482
Inspiron 3782
Wyse 5470
Latitude 3310 2-in-1
Inspiron 3582
Latitude 5310 2-IN-1
OptiPlex 7070 Ultra
OptiPlex 5080
Vostro 3582
Latitude 5310
Inspiron 5400
Precision 3440
OptiPlex 7080
Inspiron 3880
Inspiron 3881
Latitude 7285 2-in-1
Inspiron 5401 AIO
Inspiron 7590
Inspiron 7591
Inspiron 7700 All-In-One
Vostro 5090
Latitude 3310
Vostro 5880
Dell G5 5090
ChengMing 3991
ChengMing 3990
Vostro 7590
Dell Precision 3431 Tower
Wyse 5470 All-In-One
OptiPlex 3070
Latitude 5410
Latitude 3300
Latitude 7400 2-in-1
Inspiron 7790
Inspiron 5491 AIO
Inspiron 5490 AIO
OptiPlex 5070
OptiPlex 3280 All-in-One
Inspiron 3581
Precision 5540
Alienware m17 R2
Vostro 3481
Latitude 7200 2-in-1
Vostro 3581
Alienware m15 R2
XPS 7590
Alienware Area 51m R2
Vostro 3584
Latitude 5285 2-in-1
Inspiron 3781
Inspiron 3481
Latitude 13 3380
Latitude 3180
Latitude 3189
Precision 3640
OptiPlex 7780 All-in-One
Alienware m17 R3
OptiPlex 7770 All-In-One
OptiPlex 7480 All-in-One
OptiPlex 7470 All-In-One
Wyse 5070
Alienware m15 R3
OptiPlex 5270 All-In-One
OptiPlex 5480 All-In-One
Inspiron 3780
XPS 13 (9380)
Precision 3540
Vostro 3480
Inspiron 3480
Vostro 3580
Latitude 5500
Inspiron 3580
Vostro 3583
Latitude 5400
OptiPlex 7050
OptiPlex 5060
OptiPlex 5050
Precision 3541
OptiPlex 3060
OptiPlex 3050
Dell G7 7590
Vostro 3668
Dell G5 5590
Latitude 5401
Latitude 3390 2-in-1
Latitude 7400
Dell G7 7790
Dell Precision 3430 Tower
Vostro 3268
Latitude 7300
Latitude 5501
Latitude 7424 Rugged Extreme
Latitude 5420 Rugged
Latitude 5424 Rugged
Precision 5530 2-in-1
Latitude 5300 2-IN-1
Alienware Area 51m R1
Latitude 5300
OptiPlex 5250
Precision 7540
OptiPlex 3050 All-In-One
Precision 7740
OptiPlex 7450 All-In-One
Latitude 3190
Latitude 5290 2-in-1
OptiPlex 7760 All-In-One
Precision 3530
OptiPlex 7460 All In One
Latitude 5491
XPS 15 2IN1 9575
Latitude 5591
OptiPlex 5260 All-In-One
Latitude 3190 2-In-1
Latitude 5490
Latitude 5290
Latitude 5590
Precision 7530
Precision 7730
Latitude 7220 Rugged Extreme
Latitude Rugged 7220EX
Precision 7520
Latitude 5580
Latitude 5488
Latitude 5480
Precision 7720
Latitude 7390 2-in-1
Precision 3520
Latitude 5280
Latitude 5288
Precision 5530
Latitude 7480
Latitude 7380
Latitude 7280
Latitude 7390
Latitude 7490
Latitude 7290
Precision 5520
Latitude 5289
Latitude 7389
Latitude 5414 Rugged
Latitude 7414 Rugged
Latitude 12 Rugged Extreme 7214
Latitude 7212 Rugged Extreme Tablet
Alienware Aurora R10
Alienware Aurora Ryzen Edition R14
XPS 8940
OptiPlex 3090
Precision 5720 AIO
OptiPlex 3080
Vostro 3681
Vostro 3881
Vostro 3888
Dell Precision 3630 Tower
Precision 3420 Tower
Precision 3620 Tower
Precision 3930 Rack
Dell Precision 5820 Tower
Vostro 3670
Inspiron 3670
Inspiron 3470
ChengMing 3980 TOWER
Vostro 3070
Vostro 3470
Dell Precision 7920 Tower
Dell Precision 7820 Tower
PowerEdge T30 Mini Tower Server
Precision 3240 Compact
OptiPlex 7071
OptiPlex 7070
OptiPlex 7060
OptiPlex XE3

Install updates from vendor's website.

Alienware Aurora R11 - update to 1.0.21
Alienware Aurora R12 - update to 1.1.22
XPS 8960 - update to 1.2.1
Alienware Aurora R15 - update to 1.5.0
Alienware Aurora R15 AMD - update to 1.7.2
PowerEdge T30 Mini Tower Server - update to 1.12.0
Inspiron 15 3521 - update to 1.12.0
PowerEdge T40 - update to 1.12.0
Alienware x14 - update to 1.13.0
Inspiron 3502 - update to 1.14.0
Alienware Aurora R13 - update to 1.14.0
Dell G5 5000 - update to 1.15.0
Alienware x15 R2 - update to 1.15.1
Alienware x17 R2 - update to 1.15.1
Inspiron 3510 - update to 1.17.0
Inspiron 3280 - update to 1.17.5
Alienware m15 R4 - update to 1.18.0
Alienware m17 R4 - update to 1.18.0
ChengMing 3988 - update to 1.18.1
Vostro 3671 - update to 1.18.2
Inspiron 3471 - update to 1.18.2
Vostro 3471 - update to 1.18.2
Inspiron 3671 - update to 1.18.2
Alienware x17 R1 - update to 1.19.0
Alienware x15 R1 - update to 1.19.0
Inspiron 3482 - update to 1.20.0
Inspiron 3782 - update to 1.20.0
Wyse 5470 - update to 1.20.0
Latitude 3310 2-in-1 - update to 1.20.0
Inspiron 3582 - update to 1.20.0
Precision 3240 Compact - update to 1.20.0
Latitude 5310 2-IN-1 - update to 1.20.0
OptiPlex 7070 Ultra - update to 1.20.0
OptiPlex 5080 - update to 1.20.0
Vostro 3582 - update to 1.20.0
Latitude 5310 - update to 1.20.0
Inspiron 5400 - update to 1.21.0
Precision 3440 - update to 1.21.0
OptiPlex 7080 - update to 1.21.0
OptiPlex 7071 - update to 1.21.0
Inspiron 3880 - update to 1.21.0
Inspiron 3881 - update to 1.21.0
Latitude 7285 2-in-1 - update to 1.21.0
Inspiron 5401 AIO - update to 1.21.0
Inspiron 7590 - update to 1.21.0
Inspiron 7591 - update to 1.21.0
Inspiron 7700 All-In-One - update to 1.21.0
Vostro 5090 - update to 1.21.0
Latitude 3310 - update to 1.21.0
Vostro 5880 - update to 1.21.0
Dell G5 5090 - update to 1.21.0
ChengMing 3991 - update to 1.21.0
ChengMing 3990 - update to 1.21.0
Vostro 7590 - update to 1.21.0
Dell Precision 3431 Tower - update to 1.21.0
Wyse 5470 All-In-One - update to 1.21.0
OptiPlex 3070 - update to 1.22.0
Latitude 5410 - update to 1.22.0
Latitude 3300 - update to 1.22.0
Latitude 7400 2-in-1 - update to 1.22.0
Inspiron 7790 - update to 1.22.0
Inspiron 5491 AIO - update to 1.22.0
Inspiron 5490 AIO - update to 1.22.0
OptiPlex 5070 - update to 1.22.0
OptiPlex 7070 - update to 1.22.0
OptiPlex 3280 All-in-One - update to 1.23.0
Inspiron 3581 - update to 1.23.0
Precision 5540 - update to 1.23.0
Alienware m17 R2 - update to 1.23.0
Vostro 3481 - update to 1.23.0
Latitude 7200 2-in-1 - update to 1.23.0
Vostro 3581 - update to 1.23.0
Alienware m15 R2 - update to 1.23.0
XPS 7590 - update to 1.23.0
Alienware Area 51m R2 - update to 1.23.0
Vostro 3584 - update to 1.23.0
Latitude 5285 2-in-1 - update to 1.23.0
Inspiron 3781 - update to 1.23.0
Inspiron 3481 - update to 1.23.0
Latitude 13 3380 - update to 1.23.0
Latitude 3180 - update to 1.23.0
Latitude 3189 - update to 1.23.0
Precision 3640 - update to 1.24.0
OptiPlex 7780 All-in-One - update to 1.24.0
Alienware m17 R3 - update to 1.24.0
OptiPlex 7770 All-In-One - update to 1.24.0
OptiPlex 7480 All-in-One - update to 1.24.0
OptiPlex 7470 All-In-One - update to 1.24.0
Wyse 5070 - update to 1.24.0
Alienware m15 R3 - update to 1.24.0
OptiPlex 5270 All-In-One - update to 1.24.0
OptiPlex 5480 All-In-One - update to 1.24.0
Inspiron 3780 - update to 1.25.0
XPS 13 (9380) - update to 1.25.0
Precision 3540 - update to 1.25.0
Vostro 3480 - update to 1.25.0
Inspiron 3480 - update to 1.25.0
Vostro 3580 - update to 1.25.0
Latitude 5500 - update to 1.25.0
Inspiron 3580 - update to 1.25.0
Vostro 3583 - update to 1.25.0
Latitude 5400 - update to 1.25.0
OptiPlex 7050 - update to 1.26.0
OptiPlex 5060 - update to 1.26.0
OptiPlex 5050 - update to 1.26.0
OptiPlex 7060 - update to 1.26.0
OptiPlex XE3 - update to 1.26.0
Precision 3541 - update to 1.26.0
OptiPlex 3060 - update to 1.26.0
OptiPlex 3050 - update to 1.26.0
Dell G7 7590 - update to 1.26.0
Vostro 3668 - update to 1.26.0
Dell G5 5590 - update to 1.26.0
Latitude 5401 - update to 1.26.0
Latitude 3390 2-in-1 - update to 1.26.0
Latitude 7400 - update to 1.26.0
Dell G7 7790 - update to 1.26.0
Dell Precision 3430 Tower - update to 1.26.0
Vostro 3268 - update to 1.26.0
Latitude 7300 - update to 1.26.0
Latitude 5501 - update to 1.26.0
Latitude 7424 Rugged Extreme - update to 1.26.1
Latitude 5420 Rugged - update to 1.26.1
Latitude 5424 Rugged - update to 1.26.1
Precision 5530 2-in-1 - update to 1.26.8
Latitude 5300 2-IN-1 - update to 1.27.0
Alienware Area 51m R1 - update to 1.27.0
Latitude 5300 - update to 1.27.0
OptiPlex 5250 - update to 1.27.0
Precision 7540 - update to 1.27.0
OptiPlex 3050 All-In-One - update to 1.27.0
Precision 7740 - update to 1.27.0
OptiPlex 7450 All-In-One - update to 1.27.0
Latitude 3190 - update to 1.28.0
Latitude 5290 2-in-1 - update to 1.28.0
OptiPlex 7760 All-In-One - update to 1.28.0
Precision 3530 - update to 1.28.0
OptiPlex 7460 All In One - update to 1.28.0
Latitude 5491 - update to 1.28.0
XPS 15 2IN1 9575 - update to 1.28.0
Latitude 5591 - update to 1.28.0
OptiPlex 5260 All-In-One - update to 1.28.0
Latitude 3190 2-In-1 - update to 1.28.0
Latitude 5490 - update to 1.29.0
Latitude 5290 - update to 1.29.0
Latitude 5590 - update to 1.29.0
Precision 7530 - update to 1.29.1
Precision 7730 - update to 1.29.1
Latitude 7220 Rugged Extreme - update to 1.30.0
Latitude Rugged 7220EX - update to 1.30.0
Precision 7520 - update to 1.31.0
Latitude 5580 - update to 1.31.0
Latitude 5488 - update to 1.31.0
Latitude 5480 - update to 1.31.0
Precision 7720 - update to 1.31.0
Latitude 7390 2-in-1 - update to 1.31.0
Precision 3520 - update to 1.31.0
Latitude 5280 - update to 1.31.0
Latitude 5288 - update to 1.31.0
Precision 5530 - update to 1.32.0
Latitude 7480 - update to 1.32.1
Latitude 7380 - update to 1.32.1
Latitude 7280 - update to 1.32.1
Latitude 7390 - update to 1.33.0
Latitude 7490 - update to 1.33.0
Latitude 7290 - update to 1.33.0
Precision 5520 - update to 1.33.0
Latitude 5289 - update to 1.34.0
Latitude 7389 - update to 1.34.0
Latitude 5414 Rugged - update to 1.41.0
Latitude 7414 Rugged - update to 1.41.0
Latitude 12 Rugged Extreme 7214 - update to 1.41.0
Latitude 7212 Rugged Extreme Tablet - update to 1.45.0
Alienware Aurora R10 - update to 2.4.2
Alienware Aurora Ryzen Edition R14 - update to 2.11.0
XPS 8940 - update to 2.14.0
OptiPlex 3090 - update to 2.14.0
Precision 5720 AIO - update to 2.20.0
OptiPlex 3080 - update to 2.20.0
Vostro 3681 - update to 2.21.0
Vostro 3881 - update to 2.21.0
Vostro 3888 - update to 2.21.0
Dell Precision 3630 Tower - update to 2.23.0
Precision 3420 Tower - update to 2.26.0
Precision 3620 Tower - update to 2.26.0
Precision 3930 Rack - update to 2.26.0
Dell Precision 5820 Tower - update to 2.31.0
Vostro 3670 - update to 2.32.0
Inspiron 3670 - update to 2.32.0
Inspiron 3470 - update to 2.32.0
ChengMing 3980 TOWER - update to 2.32.0
Vostro 3070 - update to 2.32.0
Vostro 3470 - update to 2.32.0
Dell Precision 7920 Tower - update to 2.35.0
Dell Precision 7820 Tower - update to 2.35.0

• https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023008.pdf

• Multiple privilege escalation vulnerabilities in AMI Aptio V UEFI/BIOS firmware
• Dell PowerEdge T30/T40 Mini Tower Server update for AMI UEFI BIOS
• Dell update for AMI UEFI BIOS