vciy

CVE-2023-28029

INDEX BUILT · 2026-10-18

No source can show you its own past. This one can.

Print this page to keep the view as it stands on this date. Everything hidden behind a disclosure opens, and every receipt prints with its value.

Dell BIOS contains an improper input validation vulnerability

CVE-2023-280294 of 4 sources documented this
37

rank 37 = 0 + 17 + 0 + 20 + 0

rank@v1 · scheduled

Someone is already using it

CISA KEV catalog · public proof-of-concept · FIRST EPSS

EPSS 0.00168  ·  without this subject the record ranks 37

What it costs you if it fires

NVD CVSS base score, then the CNA's own

CVSS 6.7, from NVD  ·  without this subject the record ranks 20

It is getting worse, not staying still

FIRST EPSS series, rescorings and bad loads removed

no persisting rise in 365 days  ·  without this subject the record ranks 37

How much of the world it touches

NVD CPE configurations

401 products in the CPE ranges  ·  without this subject the record ranks 17

Someone else already set the date

CISA KEV remediation due date

no CISA due date  ·  without this subject the record ranks 37

Hindsight · the state

0.00168EPSSNOT IN KEVas of 2026-10-18
Severity5.1 MEDIUMreceipt
Harmpartial impactreceipt
Exploitationnone in held sources
Defenseunaffected versions publishedreceipt
Movementrisenreceipt
PLATEAU10Minimal movement since 2023-06-24, 1095 days at 0.00, as of 2026-06-23. arc-rules@v1

Foresight · where to check next

CVE-2015-2291Ivanti EndpointMicrosoft WindowsCVE-2022-47966CVE-2022-29499VMware vCenter28029

This record is one instance of CWE-20, improper input validation. The index holds 13579 prior instances of this class, 75 KEV-listed. The nearest of its KEV-listed records are drawn beside this. taxonomy@v1

Full pattern panel

Prior records in this weakness class. Each is its own record, dated and receipted.
Color is a claim, not decoration:the hostile worldthe defenseno signalspoke length is how much of the record matches, not how bad it is

Sources disagree here.

Severity score
Dell5.1 MEDIUMreceipt
NVD6.7 MEDIUMreceipt
What it costs
DellComplete integrity loss; partial availability lossreceipt
NVDComplete confidentiality, integrity and availability lossreceipt

Both shown, dated. We don't pick winners. disagreement-rules@v1

Running Dell CPG BIOS? Check your version

A deterministic range check against the ranges this record publishes. It tells you where a version sits in the record, not whether your deployment is exploitable. No account needed.

Watch this record

Matches your own product list against every record this index holds, and tells you when one of them moves.

What counts as a move

Watch Dell CPG BIOS

Set up a watchlist (free with an account: one stack of three products)

Record your call

Keep your verdict, your reason and the evidence together. The record takes its date when you save it.

Patch by…

Or open an investigation: an incident or a near miss on this CVE, kept with its evidence where anyone in your organisation can find it.

Choose your verdict, then sign in or use an email link. Your first 100 records are free. Evidence is frozen when the record is created.

Private to your organization unless you share it. Put the proof link in your ticket so a reviewer can inspect the basis for your call. See how decision records work.

Harm, if it fires from the vector and the weakness

Written for the ticket you're about to file.

Reachneeds local access · high privileges required · no user interaction · low attack complexityreceipt
ImpactComplete integrity loss; partial availability lossreceipt
Scored fromCVSS v3.1 · the CNA's vectorreceipt
Weakness classCWE-20 Improper Input Validationreceipt
Published consequencesCWE-20: Availability: DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory); Confidentiality: Read Memory, Read Files or Directories…cwe-consequences@4.20

CISA KEV & Federal Remediation Deadline from the record and CISA

The fix, and how long it's been waiting.

First unaffected version, by branchinspiron 1.1.0; inspiron 1.1.1; inspiron 1.10.0; inspiron 1.11.0; inspiron 1.13.0; inspiron 1.14.0receipt
Patch available sinceNo dated patch-availability record in held sources. The index holds reference URLs without dates and only the current revision of the CVE record, so the day a fix first existed cannot be derived. Only the versions it landed in.
BOD 26-04 deadlineIf the system is reachable from the internet: 14 days. If not: fix at the next system upgrade.derived
Show full BOD 26-04 deadline

CISA has not scored it, so the directive's own defaults apply: automatable no, technical impact total. Calendar days from the KEV listing or from when you find it on a system, whichever is first. Federal agencies are bound from 7 Dec 2026, and contracts often carry it to suppliers. The directive and its table

Exploit Status & Known PoCs a ladder, not a score

Current rung: Nothing observed in held sources.

  • RUNG 1Nothing observed in held sources
  • RUNG 2Proof-of-concept published
  • RUNG 3Exploited in the wild · CISA KEV listed
  • RUNG 4Ransomware campaign use known

Authority who says so

CVSS, the CNA5.1 MEDIUMreceipt
CVSS, NVD6.7 MEDIUMreceipt
Exploit probability0.00168 · top 94% of all CVEsreceipt
Blast breadth39 products across 2 vendorsderived
Assigned bydellreceipt
Recorded changes13 · last 18 Oct 2026derived

Affected & Fixed Versions as published

Affected productDell CPG BIOSreceipt
Published rangesdell alienware area 51m r1 firmware < 1.26.0; dell alienware area 51m r2 firmware < 1.22.0; dell alienware aurora r11 firmware < 1.0.20; dell alienware aurora r12 firmware < 1.1.20receipt
Show all 401 published ranges
dell alienware area 51m r1 firmware < 1.26.0
dell alienware area 51m r2 firmware < 1.22.0
dell alienware aurora r11 firmware < 1.0.20
dell alienware aurora r12 firmware < 1.1.20
dell alienware aurora r13 firmware < 1.12.0
dell alienware aurora r15 firmware < 1.1.0
dell alienware m15 r2 firmware < 1.22.0
dell alienware m15 r3 firmware < 1.23.0
dell alienware m15 r4 firmware < 1.17.0
dell alienware m15 r6 firmware < 1.21.0
dell alienware m15 r7 firmware < 1.16.0
dell alienware m16 firmware < 1.7.0
dell alienware m17 r2 firmware < 1.22.0
dell alienware m17 r3 firmware < 1.23.0
dell alienware m17 r4 firmware < 1.17.0
dell alienware x14 firmware < 1.12.0
dell alienware x15 r1 firmware < 1.18.0
dell alienware x15 r2 firmware < 1.13.0
dell alienware x17 r1 firmware < 1.18.0
dell alienware x17 r2 firmware < 1.13.0
dell chengming 3900 firmware < 1.11.0
dell chengming 3901 firmware < 1.11.0
dell chengming 3910 firmware < 1.1.0
dell chengming 3911 firmware < 1.1.0
dell chengming 3980 firmware < 2.29.0
dell chengming 3988 firmware < 1.15.0
dell chengming 3990 firmware < 1.19.0
dell chengming 3991 firmware < 1.19.0
dell g15 5510 firmware < 1.19.0
dell g15 5511 firmware < 1.21.1
dell g15 5520 firmware < 1.16.0
dell g15 5530 firmware < 1.3.0
dell g16 7620 firmware < 1.16.0
dell g3 15 3590 firmware < 1.21.0
dell g3 3500 firmware < 1.24.0
dell g3 3579 firmware < 1.25.0
dell g3 3779 firmware < 1.25.0
dell g5 15 5500 firmware < 1.24.0
dell g5 15 5590 firmware < 1.24.0
dell g5 5000 firmware < 1.13.0
dell g5 5090 firmware < 1.19.0
dell g7 15 7500 firmware < 1.23.0
dell g7 15 7590 firmware < 1.24.0
dell g7 17 7700 firmware < 1.23.0
dell g7 17 7790 firmware < 1.24.0
dell latitude 3480 firmware < 1.24.0
dell latitude 3580 firmware < 1.24.0
dell precision 5820 tower firmware < 2.27.0
dell precision 7820 tower firmware < 2.31.0
dell precision 7920 tower firmware < 2.31.0
dell embedded box pc 5000 firmware < 1.19.0
dell inspiron 13 5330 firmware < 1.3.1
dell inspiron 14 5410 firmware < 2.18.0
dell inspiron 14 5418 firmware < 2.18.0
dell inspiron 14 5430 firmware < 1.2.1
dell inspiron 14 7430 2-in-1 firmware < 1.2.1
dell inspiron 14 plus 7420 firmware < 1.11.0
dell inspiron 15 3511 firmware < 1.21.0
dell inspiron 15 5510 firmware < 2.18.0
dell inspiron 15 5518 firmware < 2.18.0
dell inspiron 16 5630 firmware < 1.2.1
dell inspiron 16 7620 2-in-1 firmware < 1.11.0
dell inspiron 16 7630 2-in-1 firmware < 1.2.1
dell inspiron 16 plus 7620 firmware < 1.11.0
dell inspiron 24 5410 all-in-one firmware < 1.11.0
dell inspiron 24 5420 all-in-one firmware < 1.1.1
dell inspiron 24 5421 all-in-one firmware < 1.1.1
dell inspiron 27 7720 all-in-one firmware < 1.1.1
dell inspiron 3020 firmware < 1.1.0
dell inspiron 3020s firmware < 1.1.0
dell inspiron 3280 firmware < 1.17.4
dell inspiron 3470 firmware < 2.29.0
dell inspiron 3471 firmware < 1.15.0
dell inspiron 3480 firmware < 1.23.0
dell inspiron 3481 firmware < 1.22.0
dell inspiron 3482 firmware < 1.19.0
dell inspiron 3490 firmware < 1.23.0
dell inspiron 3493 firmware < 1.26.0
dell inspiron 3501 firmware < 1.23.0
dell inspiron 3502 firmware < 1.13.0
dell inspiron 3510 firmware < 1.15.0
dell inspiron 3511 firmware < 1.21.0
dell inspiron 3520 firmware < 1.15.0
dell inspiron 3521 firmware < 1.10.0
dell inspiron 3580 firmware < 1.23.0
dell inspiron 3581 firmware < 1.22.0
dell inspiron 3582 firmware < 1.19.0
dell inspiron 3583 firmware < 1.23.0
dell inspiron 3584 firmware < 1.22.0
dell inspiron 3590 firmware < 1.23.0
dell inspiron 3593 firmware < 1.26.0
dell inspiron 3670 firmware < 2.29.0
dell inspiron 3671 firmware < 1.15.0
dell inspiron 3780 firmware < 1.23.0
dell inspiron 3781 firmware < 1.22.0
dell inspiron 3782 firmware < 1.19.0
dell inspiron 3790 firmware < 1.23.0
dell inspiron 3793 firmware < 1.26.0
dell inspiron 3880 firmware < 1.19.0
dell inspiron 3881 firmware < 1.18.0
dell inspiron 3891 firmware < 1.17.0
dell inspiron 3910 firmware < 1.11.0
dell inspiron 5300 firmware < 1.20.0
dell inspiron 5301 firmware < 1.25.0
dell inspiron 5310 firmware < 2.19.0
dell inspiron 5320 firmware < 1.10.0
dell inspiron 5391 firmware < 1.22.0
dell inspiron 5400 firmware < 1.18.0
dell inspiron 5400 2-in-1 firmware < 1.21.0
dell inspiron 5401 firmware < 1.21.0
dell inspiron 5401 aio firmware < 1.18.0
dell inspiron 5402 firmware < 1.22.0
dell inspiron 5406 2-in-1 firmware < 1.22.0
dell inspiron 5408 firmware < 1.21.0
dell inspiron 5409 firmware < 1.22.0
dell inspiron 5410 firmware < 2.18.0
dell inspiron 5420 firmware < 1.13.0
dell inspiron 5481 2-in-1 firmware < 2.20.0
dell inspiron 5490 firmware < 1.23.0
dell inspiron 5490 aio firmware < 1.20.0
dell inspiron 5491 2-in-1 firmware < 1.19.0
dell inspiron 5493 firmware < 1.26.0
dell inspiron 5494 firmware < 1.23.0
dell inspiron 5498 firmware < 1.23.0
dell inspiron 5501 firmware < 1.21.0
dell inspiron 5502 firmware < 1.22.0
dell inspiron 5508 firmware < 1.21.0
dell inspiron 5509 firmware < 1.22.0
dell inspiron 5570 firmware < 1.14.0
dell inspiron 5590 firmware < 1.23.0
dell inspiron 5591 2-in-1 firmware < 1.19.0
dell inspiron 5593 firmware < 1.26.0
dell inspiron 5594 firmware < 1.23.0
dell inspiron 5598 firmware < 1.23.0
dell inspiron 5620 firmware < 1.13.0
dell inspiron 5770 firmware < 1.14.0
dell inspiron 7000 firmware < 1.22.0
dell inspiron 7300 firmware < 1.25.0
dell inspiron 7300 2-in-1 firmware < 1.17.0
dell inspiron 7306 2-in-1 firmware < 1.22.0
dell inspiron 7391 firmware < 1.20.0
dell inspiron 7400 firmware < 1.25.0
dell inspiron 7420 firmware < 1.11.0
dell inspiron 7490 firmware < 1.19.0
dell inspiron 7500 firmware < 1.22.0
dell inspiron 7500 2-in-1 black firmware < 1.17.0
dell inspiron 7500 2-in-1 silver firmware < 1.21.0
dell inspiron 7501 firmware < 1.22.0
dell inspiron 7506 2-in-1 firmware < 1.22.0
dell inspiron 7510 firmware < 1.15.0
dell inspiron 7590 firmware < 1.19.0
dell inspiron 7591 firmware < 1.20.0
dell inspiron 7591 firmware < 1.19.0
dell inspiron 7610 firmware < 1.15.0
dell inspiron 7700 all-in-one firmware < 1.18.0
dell inspiron 7706 2-in-1 firmware < 1.22.0
dell inspiron 7710 firmware < 1.11.0
dell inspiron 7790 firmware < 1.20.0
dell inspiron 7791 firmware < 1.20.0
dell inspiron 5491 aio firmware < 1.20.0
dell latitude 12 rugged extreme 7214 firmware < 1.40.0
dell latitude 13 3380 firmware < 1.22.0
dell latitude 14 rugged 5414 firmware < 1.40.0
dell latitude 3120 firmware < 1.16.0
dell latitude 3140 firmware < 1.5.0
dell latitude 3180 firmware < 1.22.0
dell latitude 3189 firmware < 1.22.0
dell latitude 3190 firmware < 1.26.0
dell latitude 3190 2-in-1 firmware < 1.26.0
dell latitude 3300 firmware < 1.21.0
dell latitude 3301 firmware < 1.26.0
dell latitude 3310 firmware < 1.20.0
dell latitude 3310 2-in-1 firmware < 1.19.0
dell latitude 3320 firmware < 1.21.0
dell latitude 3330 firmware < 1.11.0
dell latitude 3390 2-in-1 firmware < 1.25.0
dell latitude 3400 firmware < 1.28.0
dell latitude 3410 firmware < 1.23.0
dell latitude 3420 firmware < 1.27.0
dell latitude 3430 firmware < 1.9.0
dell latitude 3490 firmware < 1.25.0
dell latitude 3500 firmware < 1.28.0
dell latitude 3510 firmware < 1.23.0
dell latitude 3520 firmware < 1.27.0
dell latitude 3530 firmware < 1.9.0
dell latitude 3590 firmware < 1.25.0
dell latitude 5280 firmware < 1.30.0
dell latitude 5285 2-in-1 firmware < 1.22.0
dell latitude 5288 firmware < 1.30.0
dell latitude 5289 firmware < 1.33.0
dell latitude 5290 firmware < 1.28.0
dell latitude 5290 2-in-1 firmware < 1.26.0
dell latitude 5300 firmware < 1.26.0
dell latitude 5300 2-in-1 firmware < 1.26.0
dell latitude 5310 firmware < 1.19.0
dell latitude 5310 2-in-1 firmware < 1.19.0
dell latitude 5320 firmware < 1.27.0
dell latitude 5330 firmware < 1.12.0
dell latitude 5400 firmware < 1.24.0
dell latitude 5401 firmware < 1.25.0
dell latitude 5410 firmware < 1.20.0
dell latitude 5411 firmware < 1.21.0
dell latitude 5420 firmware < 1.27.0
dell latitude 5420 rugged firmware < 1.24.0
dell latitude 5424 rugged firmware < 1.24.0
dell latitude 5430 firmware < 1.12.0
dell latitude 5480 firmware < 1.30.0
dell latitude 5488 firmware < 1.30.0
dell latitude 5490 firmware < 1.28.0
dell latitude 5491 firmware < 1.26.0
dell latitude 5500 firmware < 1.24.0
dell latitude 5501 firmware < 1.25.0
dell latitude 5510 firmware < 1.20.0
dell latitude 5511 firmware < 1.21.0
dell latitude 5520 firmware < 1.27.0
dell latitude 5521 firmware < 1.21.0
dell latitude 5530 firmware < 1.13.2
dell latitude 5531 firmware < 1.13.0
dell latitude 5580 firmware < 1.30.0
dell latitude 5590 firmware < 1.28.0
dell latitude 5591 firmware < 1.26.0
dell latitude 7200 2-in-1 firmware < 1.22.0
dell latitude 7210 2-in-1 firmware < 1.21.0
dell latitude 7212 rugged extreme tablet firmware < 1.44.0
dell latitude 7230 rugged extreme tablet firmware < 1.5.2
dell latitude 7280 firmware < 1.31.0
dell latitude 7285 2-in-1 firmware < 1.20.0
dell latitude 7290 firmware < 1.32.0
dell latitude 7300 firmware < 1.25.0
dell latitude 7310 firmware < 1.22.0
dell latitude 7320 detachable firmware < 1.21.0
dell latitude 7330 firmware < 1.13.0
dell latitude 7380 firmware < 1.31.0
dell latitude 7389 firmware < 1.33.0
dell latitude 7390 firmware < 1.32.0
dell latitude 7390 2-in-1 firmware < 1.30.0
dell latitude 7400 firmware < 1.25.0
dell latitude 7400 2-in-1 firmware < 1.21.0
dell latitude 7410 firmware < 1.22.0
dell latitude 7414 rugged extreme firmware < 1.40.0
dell latitude 7424 rugged extreme firmware < 1.24.0
dell latitude 7430 firmware < 1.13.0
dell latitude 7480 firmware < 1.31.0
dell latitude 7490 firmware < 1.32.0
dell latitude 7530 firmware < 1.13.0
dell latitude 9330 firmware < 1.10.1
dell latitude 9410 firmware < 1.21.0
dell latitude 9420 firmware < 1.20.0
dell latitude 9430 firmware < 1.13.1
dell latitude 9510 firmware < 1.19.0
dell latitude 9520 firmware < 1.21.0
dell latitude rugged 5430 firmware < 1.17.0
dell latitude rugged 7220 firmware < 1.28.0
dell latitude rugged 7220ex firmware < 1.28.0
dell latitude rugged 7330 firmware < 1.17.0
dell latitude 5421 firmware < 1.20.0
dell optiplex 3000 firmware < 1.11.0
dell optiplex 3000 thin client firmware < 1.8.0
dell optiplex 3050 firmware < 1.25.0
dell optiplex 3050 all-in-one firmware < 1.26.0
dell optiplex 3060 firmware < 1.25.0
dell optiplex 3070 firmware < 1.21.0
dell optiplex 3080 firmware < 2.18.0
dell optiplex 3090 firmware < 2.12.1
dell optiplex 3090 ultra firmware < 1.19.0
dell optiplex 3280 all-in-one firmware < 1.20.0
dell optiplex 5000 firmware < 1.11.0
dell optiplex 5050 firmware < 1.25.0
dell optiplex 5060 firmware < 1.25.0
dell optiplex 5070 firmware < 1.21.0
dell optiplex 5080 firmware < 1.18.0
dell optiplex 5090 firmware < 1.17.0
dell optiplex 5250 firmware < 1.26.0
dell optiplex 5260 all-in-one firmware < 1.26.0
dell optiplex 5270 all-in-one firmware < 1.22.0
dell optiplex 5400 firmware < 1.1.24
dell optiplex 5480 all-in-one firmware < 1.21.0
dell optiplex 5490 all-in-one firmware < 1.20.0
dell optiplex 7000 firmware < 1.11.0
dell optiplex 7000 oem firmware < 1.11.0
dell optiplex 7050 firmware < 1.25.0
dell optiplex 7060 firmware < 1.25.0
dell optiplex 7070 firmware < 1.21.0
dell optiplex 7070 ultra firmware < 1.18.0
dell optiplex 7071 firmware < 1.19.0
dell optiplex 7080 firmware < 1.19.0
dell optiplex 7090 firmware < 1.17.0
dell optiplex 7090 ultra firmware < 1.19.0
dell optiplex 7400 firmware < 1.1.24
dell optiplex 7450 firmware < 1.26.0
dell optiplex 7460 all-in-one firmware < 1.26.0
dell optiplex 7470 all-in-one firmware < 1.22.0
dell optiplex 7480 all-in-one firmware < 1.21.0
dell optiplex 7490 all-in-one firmware < 1.20.0
dell optiplex 7760 all-in-one firmware < 1.26.0
dell optiplex 7770 all-in-one firmware < 1.22.0
dell optiplex 7780 all-in-one firmware < 1.21.0
dell optiplex 7410 all-in-one firmware < 1.2.0
dell optiplex small form factor plus 7010 firmware < 1.2.0
dell optiplex tower plus 7010 firmware < 1.2.0
dell optiplex xe3 firmware < 1.25.0
dell precision 3240 compact firmware < 1.18.0
dell precision 3420 tower firmware < 2.25.0
dell precision 3430 tower firmware < 1.24.0
dell precision 3431 tower firmware < 1.19.0
dell precision 3440 firmware < 1.18.0
dell precision 3450 firmware < 1.17.0
dell precision 3460 small form factor firmware < 2.3.1
dell precision 3520 firmware < 1.30.0
dell precision 3530 firmware < 1.26.0
dell precision 3540 firmware < 1.24.0
dell precision 3541 firmware < 1.25.0
dell precision 3550 firmware < 1.20.0
dell precision 3551 firmware < 1.21.0
dell precision 3560 firmware < 1.27.0
dell precision 3561 firmware < 1.21.0
dell precision 3570 firmware < 1.13.2
dell precision 3571 firmware < 1.13.0
dell precision 3620 tower firmware < 2.25.0
dell precision 3630 tower firmware < 2.21.0
dell precision 3640 tower firmware < 1.21.0
dell precision 3650 tower firmware < 1.21.0
dell precision 3660 firmware < 2.3.0
dell precision 3930 rack firmware < 2.24.0
dell precision 5470 firmware < 1.12.0
dell precision 5520 firmware < 1.32.0
dell precision 5530 firmware < 1.31.0
dell precision 5530 2-in-1 firmware < 1.24.8
dell precision 5540 firmware < 1.21.0
dell precision 5550 firmware < 1.22.0
dell precision 5560 firmware < 1.19.0
dell precision 5570 firmware < 1.12.0
dell precision 5720 aio firmware < 2.19.0
dell precision 5750 firmware < 1.24.0
dell precision 5760 firmware < 1.19.0
dell precision 5770 firmware < 1.16.1
dell precision 7510 firmware < 1.31.3
dell precision 7520 firmware < 1.30.0
dell precision 7530 firmware < 1.27.0
dell precision 7540 firmware < 1.25.0
dell precision 7560 firmware < 1.21.1
dell precision 7670 firmware < 1.11.0
dell precision 7710 firmware < 1.31.3
dell precision 7720 firmware < 1.30.0
dell precision 7730 firmware < 1.27.0
dell precision 7740 firmware < 1.25.0
dell precision 7760 firmware < 1.21.1
dell precision 7770 firmware < 1.11.0
dell precision 7865 tower firmware < 1.0.23
dell vostro 16 5630 firmware < 1.2.1
dell vostro 3020 sff firmware < 1.1.0
dell vostro 3020 t firmware < 1.1.0
dell vostro 3070 firmware < 2.29.0
dell vostro 3267 firmware < 1.25.0
dell vostro 3268 firmware < 1.25.0
dell vostro 3400 firmware < 1.23.0
dell vostro 3401 firmware < 1.23.0
dell vostro 3420 firmware < 1.15.0
dell vostro 3470 firmware < 2.29.0
dell vostro 3471 firmware < 1.15.0
dell vostro 3480 firmware < 1.23.0
dell vostro 3481 firmware < 1.22.0
dell vostro 3490 firmware < 1.23.0
dell vostro 3500 firmware < 1.23.0
dell vostro 3501 firmware < 1.23.0
dell vostro 3510 firmware < 1.21.0
dell vostro 3520 firmware < 1.15.0
dell vostro 3580 firmware < 1.23.0
dell vostro 3581 firmware < 1.22.0
dell vostro 3582 firmware < 1.19.0
dell vostro 3583 firmware < 1.23.0
dell vostro 3584 firmware < 1.22.0
dell vostro 3590 firmware < 1.23.0
dell vostro 3667 firmware < 1.25.0
dell vostro 3668 firmware < 1.25.0
dell vostro 3669 firmware < 1.25.0
dell vostro 3670 firmware < 2.29.0
dell vostro 3671 firmware < 1.15.0
dell vostro 3681 firmware < 2.19.0
dell vostro 3690 firmware < 1.17.0
dell vostro 3710 firmware < 1.11.0
dell vostro 3881 firmware < 2.19.0
dell vostro 3888 firmware < 2.19.0
dell vostro 3890 firmware < 1.17.0
dell vostro 3910 firmware < 1.11.0
dell vostro 5090 firmware < 1.19.0
dell vostro 5300 firmware < 1.20.0
dell vostro 5301 firmware < 1.25.0
dell vostro 5310 firmware < 2.19.0
dell vostro 5320 firmware < 1.10.0
dell vostro 5391 firmware < 1.22.0
dell vostro 5401 firmware < 1.21.0
dell vostro 5402 firmware < 1.22.0
dell vostro 5410 firmware < 2.18.0
dell vostro 5490 firmware < 1.23.0
dell vostro 5491 firmware < 1.26.0
dell vostro 5501 firmware < 1.21.0
dell vostro 5502 firmware < 1.22.0
dell vostro 5510 firmware < 2.18.0
dell vostro 5590 firmware < 1.23.0
more ranges not held

A rung lights from a row in the index, never from an assessment. "Held sources" is the true scope of the claim: this index reads the CVE record, NVD, CISA KEV, FIRST's EPSS and public proof-of-concept repositories, and it does not observe attacks.

Unaudited dollar value2 of 3 inputs carry a receipt
Exposure$6,020over the next 30 days, if this record is yours
Movementno material movementthe record holds only daily drift and scoring model releases
Basisassumeda published average, not your estate

$6,020 = $4.99M incident cost x 0.7179585840212677 exposure x 0.00168 likelihood

udv@v1 · unaudited · wrong for you until you say what you run

$4.99M is the cost of a breach that happened, from IBM Cost of a Data Breach Report 2026, global average. It is not the value of any asset of yours. That average already covers breaches of every severity, so scaling it by exposure understates a partial-impact record. That is an assumption, not a measurement. Your own asset value goes in the decision record.

Did this affect your environment?Answering needs an account.

Attack path

Local accessrequires high privilegesDell CPG BIOSCWE-20 improper input validationIntegrity lossI:Hexploits CWE-20data compromise

What it is stated by the CNA

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable receipt

NVD's analysis a second authority

severity
6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
weakness
CWE-20
affected versions
dell alienware area 51m r1 firmware < 1.26.0; dell alienware area 51m r2 firmware < 1.22.0; dell alienware aurora r11 firmware < 1.0.20; and 398 more, listed in full below
also scored by
security_alert@emc.com 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L

The CNA scored it 5.1 and NVD 6.7. Both are shown because both were published; we do not pick one.

check it yourself dell.com receipt

Movement the material steps

24 Jun 20230.00042
17 Mar 20250.00041 · scoring model v2025.03.14
15 Jun 20260.00158 · scoring model v2026.06.15
23 Jun 20260.00168
Show all 13 observations
24 Jun 20230.00042
17 Mar 20250.00041
19 Mar 20250.00044
29 Mar 20250.00085
30 Mar 20250.00044
15 Apr 20250.00018
18 Nov 20250.00044
21 Nov 20250.00018
18 Mar 20260.0002
19 Apr 20260.00022
15 Jun 20260.00158
22 Jun 20260.00167
23 Jun 20260.00168

13 observations held. A highlighted step crossed a promotion threshold. A step marked with a scoring model moved because the instrument was replaced, not because the vulnerability changed. receipt

The full biography

EPSS 0.00168Published2023-06-23Index as of2026-06-23

The record had been public for 3 years when this index was last written.

Published 2023-06-23 receipt · Index as of 2026-06-23 derived

The pattern, elsewhere

This record is one instance of CWE-20, improper input validation. The index holds 13579 prior instances of this class, 75 KEV-listed. The nearest of its KEV-listed records are drawn beside this. cwe-consequences@4.20

CVE-2015-2291matches 5 of 8KEV listed · 2017receipt
CVE-2026-6973 · Ivanti Endpoint Manager Mobilematches 5 of 9KEV listed · 2026receipt
CVE-2025-32706 · Microsoft Windows 10 Version 1507matches 5 of 9KEV listed · 2025receipt
CVE-2022-47966matches 4 of 8KEV listed · 2023receipt
CVE-2022-29499matches 4 of 8KEV listed · 2022receipt
CVE-2021-21985 · VMware vCenter Server and VMware Cloud…matches 4 of 9KEV listed · 2021receipt

"Matches n of m" counts the attributes the two records can both be compared on: the CVSS metrics they share a version of, any weakness class beyond this one, and the vendor. fit-rules@v1

13579 records in this class held. The six above are drawn from the ones CISA has listed as exploited, ranked by how much of the record matches this one. That is why every one of them is KEV-listed: the pool is, so the colour on those spokes says nothing the pool has not already said.

No curated product neighbourhood is held for this product, so the records above are the nearest this index can name. The neighbourhood table covers a small set of products and is extended by hand.

Siblings and hubs

Records related to this one

None. No alias set, and nothing in the corpus cites this identifier or shares its product family within 60 days.

Announced with 26 others

This record was published as one of 27 that cite a single advisory. The batch page names that advisory, counts what the group offers, and says what it does not cover.

What that batch was

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

Browse the index from here

Every CVE we hold for DellAdded to CISA KEV this weekThe whole index

These are index-wide views, not findings about CVE-2023-28029.

What usually comes next

Brief on CVE-2023-28029Held facts, dated and print-ready. Sign in to add the researched section.What moved across the whole index this week?The material set, not the catalogue.Do we run Dell CPG BIOS?Match a product list against what we hold. Product names, not versions.

Everything above needs no account. What is below is work: assembling it, scoping it to your estate, watching it, and handing it to someone else.

Everything on this page is free. Public data. Withholding it protects nothing.