Skip to content
Fencer Vulns
medium 6.7

CVE-2023-43078 json

Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary fo…

published 2024-08-28 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-47499

cvss
6.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 6%
public exploits
0
none known

Summary

Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service.

Patch / fix

  • Dell Dell Client Platform, Dell Dock Firmware 1.8.0, 1.11.0, 1.12.0, 1.12.1, 1.14.1, 1.16.0, 1.17.0, 1.18.0, 1.19.0, 1.20.0, 1.22.0, 1.23.0, 1.24.0, 1.26.0, 1.27.0, 1.28.0, 1.29.0, 1.30.0, 2.24.0, 2.25.0
  • dell alienware_m15_r6_firmware 1.27.0
  • dell alienware_m15_r7_firmware 1.22.0
  • dell alienware_m16_r1_firmware 1.14.1
  • dell alienware_x14_r2_firmware 1.11.0
  • dell chengming_3900_firmware 1.19.0
  • dell chengming_3988_firmware 1.20.0
  • dell chengming_3991_firmware 1.24.0
  • dell g15_5511_firmware 1.26.0
  • dell g15_5530_firmware 1.12.0
  • dell g3_3500_firmware 1.28.0
  • dell g5_5000_firmware 1.17.0
  • dell g5_5090_firmware 1.23.0
  • dell dell_g7_7700_firmware 1.30.0
  • dell precision_3630_tower_firmware 2.25.0
  • dell inspiron_13_5320_firmware 1.16.0
  • dell inspiron_13_5330_firmware 1.12.1
  • dell inspiron_14_5410_firmware 2.24.0
  • dell inspiron_15_3530_firmware 1.8.0
  • dell inspiron_24_5411_all-in-one_firmware 1.18.0
  • dell inspiron_3593_firmware 1.29.0
  • dell inspiron_3880_firmware 1.24.1
  • dell inspiron_3891_firmware 1.22.1
  • dell inspiron_5301_firmware 1.31.0
  • dell latitude_3300_firmware 1.25.0
  • dell latitude_3340_firmware 1.10.0
  • dell latitude_3420_firmware 1.34.0
  • dell latitude_5290_firmware 1.32.0
  • dell latitude_5320_firmware 1.36.0
  • dell latitude_5340_firmware 1.10.1

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.17% chance of exploitation in the next 30 days, higher than 6% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
NVD 3.1 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected products

  • Dell Dell Client Platform, Dell Dock Firmware
  • dell alienware_m15_r6_firmware
  • dell alienware_m15_r7_firmware
  • dell alienware_m16_r1_firmware
  • dell alienware_x14_r2_firmware
  • dell chengming_3900_firmware
  • dell chengming_3988_firmware
  • dell chengming_3991_firmware
  • dell g15_5511_firmware
  • dell g15_5530_firmware
  • dell g3_3500_firmware
  • dell g5_5000_firmware
  • dell g5_5090_firmware
  • dell dell_g7_7700_firmware
  • dell precision_3630_tower_firmware
  • dell inspiron_13_5320_firmware
  • dell inspiron_13_5330_firmware
  • dell inspiron_14_5410_firmware
  • dell inspiron_15_3530_firmware
  • dell inspiron_24_5411_all-in-one_firmware
  • dell inspiron_3593_firmware
  • dell inspiron_3880_firmware
  • dell inspiron_3891_firmware
  • dell inspiron_5301_firmware
  • dell latitude_3300_firmware
  • dell latitude_3340_firmware
  • dell latitude_3420_firmware
  • dell latitude_5290_firmware
  • dell latitude_5320_firmware
  • dell latitude_5340_firmware
  • dell latitude_5420_firmware
  • dell latitude_5530_firmware
  • dell latitude_7220_rugged_extreme_firmware
  • dell latitude_7290_firmware
  • dell latitude_7320_firmware
  • dell latitude_9520_firmware
  • dell optiplex_3000_thin_client_firmware
  • dell optiplex_3080_firmware
  • dell optiplex_3090_firmware
  • dell optiplex_5090_tower_firmware
  • dell optiplex_5400_all-in-one_firmware
  • dell optiplex_5490_all-in-one_firmware
  • dell precision_3260_xe_compact_firmware
  • dell precision_3650_tower_firmware
  • dell precision_3660_firmware

Classification

Weakness
  • CWE-59 Improper Link Resolution Before File Access

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.