Dell BIOS contains a Time-of-check Time-of-use vulnerability
Published Feb 1, 2023
7.5
HIGHCVSS 3.1
EPSS 0.16%
Description
Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system.
Affected products
-
- Version 0StatusaffectedConstraints<=2.15.0
- Version
Configuration 1
- < 1.22.2
Running on/with
- n/a
Configuration 2
- < 1.19.0
Running on/with
- n/a
Configuration 3
- < 2.3.2
Running on/with
- n/a
Configuration 4
- < 1.0.17
Running on/with
- n/a
Configuration 5
- < 1.1.17
Running on/with
- n/a
Configuration 6
- < 1.7.0
Running on/with
- n/a
Configuration 7
- < 1.0.26
Running on/with
- n/a
Configuration 8
- < 1.0.22
Running on/with
- n/a
Configuration 9
- < 2.15.0
Running on/with
- n/a
Configuration 10
- < 1.18.3
Running on/with
- n/a
Configuration 11
- < 1.20.0
Running on/with
- n/a
Configuration 12
- < 1.14.0
Running on/with
- n/a
Configuration 13
- < 2.15.0
Running on/with
- n/a
Configuration 14
- < 1.18.3
Running on/with
- n/a
Configuration 15
- < 1.20.0
Running on/with
- n/a
Configuration 16
- < 1.14.0
Running on/with
- n/a
Configuration 17
- < 1.7.0
Running on/with
- n/a
Configuration 18
- < 1.14.0
Running on/with
- n/a
Configuration 19
- < 1.8.2
Running on/with
- n/a
Configuration 20
- < 1.14.0
Running on/with
- n/a
Configuration 21
- < 1.8.2
Running on/with
- n/a
Configuration 22
- < 2.5.0
Running on/with
- n/a
Configuration 23
- < 2.26.0
Running on/with
- n/a
Configuration 24
- < 1.13.0
Running on/with
- n/a
Configuration 25
- < 1.16.2
Running on/with
- n/a
Configuration 26
- < 1.16.2
Running on/with
- n/a
Configuration 27
- < 1.19.0
Running on/with
- n/a
Configuration 28
- < 1.24.0
Running on/with
- n/a
Configuration 29
- < 1.24.0
Running on/with
- n/a
Configuration 30
- < 1.22.0
Running on/with
- n/a
Configuration 31
- < 1.11.0
Running on/with
- n/a
Configuration 32
- < 1.17.0
Running on/with
- n/a
Configuration 33
- < 1.22.0
Running on/with
- n/a
Configuration 34
- < 1.22.0
Running on/with
- n/a
Configuration 35
- < 1.23.0
Running on/with
- n/a
Configuration 36
- < 1.23.0
Running on/with
- n/a
Configuration 37
- < 1.10.0
Running on/with
- n/a
Configuration 38
- < 1.20.0
Running on/with
- n/a
Configuration 39
- < 1.16.0
- 1.16.0
Running on/with
- n/a
Configuration 40
- < 1.18.0
Running on/with
- n/a
Configuration 41
- < 1.17.2
Running on/with
- n/a
Configuration 42
- < 2.26.0
Running on/with
- n/a
Configuration 43
- < 1.13.0
Running on/with
- n/a
Configuration 44
- < 1.21.0
Running on/with
- n/a
Configuration 45
- < 1.20.0
Running on/with
- n/a
Configuration 46
- < 1.17.0
Running on/with
- n/a
Configuration 47
- < 1.10.1
Running on/with
- n/a
Configuration 48
- < 1.11.1
Running on/with
- n/a
Configuration 49
- < 1.6.1
Running on/with
- n/a
Configuration 50
- < 1.21.0
Running on/with
- n/a
Configuration 51
- < 1.21.0
Running on/with
- n/a
Configuration 52
- < 1.20.0
Running on/with
- n/a
Configuration 53
- < 1.20.0
Running on/with
- n/a
Configuration 54
- < 1.17.0
Running on/with
- n/a
Configuration 55
- < 2.26.0
Running on/with
- n/a
Configuration 56
- < 1.13.0
Running on/with
- n/a
Configuration 57
- < 1.21.0
Running on/with
- n/a
Configuration 58
- < 1.20.0
Running on/with
- n/a
Configuration 59
- < 1.17.0
Running on/with
- n/a
Configuration 60
- < 1.16.2
Running on/with
- n/a
Configuration 61
- < 1.16.0
Running on/with
- n/a
Configuration 62
- < 1.15.0
Running on/with
- n/a
Configuration 63
- < 1.15.0
Running on/with
- n/a
Configuration 64
- < 1.2.23
Running on/with
- n/a
Configuration 65
- < 2.18.0
Running on/with
- n/a
Configuration 66
- < 2.18.0
Running on/with
- n/a
Configuration 67
- < 1.17.0
Running on/with
- n/a
Configuration 68
- < 1.12.0
Running on/with
- n/a
Configuration 69
- < 2.13.0
Running on/with
- n/a
Configuration 70
- < 1.12.0
Running on/with
- n/a
Configuration 71
- < 1.16.0
Running on/with
- n/a
Configuration 72
- < 1.16.0
Running on/with
- n/a
Configuration 73
- < 1.15.0
Running on/with
- n/a
Configuration 74
- < 1.2.23
Running on/with
- n/a
Configuration 75
- < 1.17.0
Running on/with
- n/a
Configuration 76
- < 1.17.0
Running on/with
- n/a
Configuration 77
- < 1.21.0
Running on/with
- n/a
Configuration 78
- < 1.12.1
Running on/with
- n/a
Configuration 79
- < 1.21.0
Running on/with
- n/a
Configuration 80
- < 1.21.0
Running on/with
- n/a
Configuration 81
- < 1.24.0
Running on/with
- n/a
Configuration 82
- < 1.24.0
Running on/with
- n/a
Configuration 83
- < 1.19.0
Running on/with
- n/a
Configuration 84
- < 1.18.0
Running on/with
- n/a
Configuration 85
- < 1.17.0
Running on/with
- n/a
Configuration 86
- < 1.23.1
Running on/with
- n/a
Configuration 87
- < 1.23.0
Running on/with
- n/a
Configuration 88
- < 1.23.0
Running on/with
- n/a
Configuration 89
- < 1.28.0
Running on/with
- n/a
Configuration 90
- < 1.21.0
Running on/with
- n/a
Configuration 91
- < 1.28.0
Running on/with
- n/a
Configuration 92
- < 1.31.0
Running on/with
- n/a
Configuration 93
- < 1.26.0
Running on/with
- n/a
Configuration 94
- < 1.24.0
Running on/with
- n/a
Configuration 95
- < 1.24.0
Running on/with
- n/a
Configuration 96
- < 1.24.0
Running on/with
- n/a
Configuration 97
- < 1.17.0
Running on/with
- n/a
Configuration 98
- < 1.17.0
Running on/with
- n/a
Configuration 99
- < 1.21.0
Running on/with
- n/a
Configuration 100
- < 1.23.0
Running on/with
- n/a
Configuration 101
- < 1.17.0
Running on/with
- n/a
Configuration 102
- < 1.17.0
Running on/with
- n/a
Configuration 103
- < 1.39.0
Running on/with
- n/a
Configuration 104
- < 1.21.1
Running on/with
- n/a
Configuration 105
- < 1.21.1
Running on/with
- n/a
Configuration 106
- < 1.28.0
Running on/with
- n/a
Configuration 107
- < 1.28.0
Running on/with
- n/a
Configuration 108
- < 1.26.0
Running on/with
- n/a
Configuration 109
- < 1.25.0
Running on/with
- n/a
Configuration 110
- < 1.21.0
Running on/with
- n/a
Configuration 111
- < 1.23.0
Running on/with
- n/a
Configuration 112
- < 1.17.0
Running on/with
- n/a
Configuration 113
- < 1.17.0
Running on/with
- n/a
Configuration 114
- < 1.28.0
Running on/with
- n/a
Configuration 115
- < 1.26.0
Running on/with
- n/a
Configuration 116
- < 1.25.0
Running on/with
- n/a
Configuration 117
- < 1.20.0
Running on/with
- n/a
Configuration 118
- < 1.18.0
Running on/with
- n/a
Configuration 119
- < 1.42.0
Running on/with
- n/a
Configuration 120
- < 1.39.0
Running on/with
- n/a
Configuration 121
- < 1.26.1
Running on/with
- n/a
Configuration 122
- < 1.26.1
Running on/with
- n/a
Configuration 123
- < 1.18.0
Running on/with
- n/a
Configuration 124
- < 1.29.0
Running on/with
- n/a
Configuration 125
- < 1.19.0
Running on/with
- n/a
Configuration 126
- < 1.30.0
Running on/with
- n/a
Configuration 127
- < 1.23.0
Running on/with
- n/a
Configuration 128
- < 1.19.0
Running on/with
- n/a
Configuration 129
- < 1.32.3
Running on/with
- n/a
Configuration 130
- < 1.29.0
Running on/with
- n/a
Configuration 131
- < 1.31.0
Running on/with
- n/a
Configuration 132
- < 1.30.0
Running on/with
- n/a
Configuration 133
- < 1.26.0
Running on/with
- n/a
Configuration 134
- < 1.23.0
Running on/with
- n/a
Configuration 135
- < 1.19.0
Running on/with
- n/a
Configuration 136
- < 1.19.0
Running on/with
- n/a
Configuration 137
- < 1.39.0
Running on/with
- n/a
Configuration 138
- < 1.21.1
Running on/with
- n/a
Configuration 139
- < 1.29.0
Running on/with
- n/a
Configuration 140
- < 1.30.0
Running on/with
- n/a
Configuration 141
- < 1.18.0
Running on/with
- n/a
Configuration 142
- < 1.16.0
Running on/with
- n/a
Configuration 143
- < 1.36.3
Running on/with
- n/a
Configuration 144
- < 1.36.3
Running on/with
- n/a
Configuration 145
- < 1.23.0
Running on/with
- n/a
Configuration 146
- < 1.24.0
Running on/with
- n/a
Configuration 147
- < 1.23.0
Running on/with
- n/a
Configuration 148
- < 1.19.0
Running on/with
- n/a
Configuration 149
- < 2.16.0
Running on/with
- n/a
Configuration 150
- < 2.9.0
Running on/with
- n/a
Configuration 151
- < 1.17.0
Running on/with
- n/a
Configuration 152
- < 1.23.0
Running on/with
- n/a
Configuration 153
- < 1.23.0
- 1.23.0
Running on/with
- n/a
Configuration 154
- < 1.19.0
Running on/with
- n/a
Configuration 155
- < 1.16.0
Running on/with
- n/a
Configuration 156
- < 1.24.0
Running on/with
- n/a
Configuration 157
- < 1.24.0
Running on/with
- n/a
Configuration 158
- < 1.19.0
Running on/with
- n/a
Configuration 159
- < 1.18.0
Running on/with
- n/a
Configuration 160
- < 1.23.0
Running on/with
- n/a
Configuration 161
- < 1.23.0
Running on/with
- n/a
Configuration 162
- < 1.19.0
Running on/with
- n/a
Configuration 163
- < 1.15.0
Running on/with
- n/a
Configuration 164
- < 1.17.0
Running on/with
- n/a
Configuration 165
- < 1.16.0
Running on/with
- n/a
Configuration 166
- < 1.24.0
Running on/with
- n/a
Configuration 167
- < 1.24.0
Running on/with
- n/a
Configuration 168
- < 1.19.0
Running on/with
- n/a
Configuration 169
- < 1.18.0
Running on/with
- n/a
Configuration 170
- < 1.24.0
Running on/with
- n/a
Configuration 171
- < 1.19.0
Running on/with
- n/a
Configuration 172
- < 1.18.0
Running on/with
- n/a
Configuration 173
- < 1.23.0
Running on/with
- n/a
Configuration 174
- < 1.15.0
Running on/with
- n/a
Configuration 175
- < 2.24.0
Running on/with
- n/a
Configuration 176
- < 1.17.0
Running on/with
- n/a
Configuration 177
- < 1.16.0
Running on/with
- n/a
Configuration 178
- < 1.34.3
Running on/with
- n/a
Configuration 179
- < 1.28.0
Running on/with
- n/a
Configuration 180
- < 1.25.0
Running on/with
- n/a
Configuration 181
- < 1.21.0
Running on/with
- n/a
Configuration 182
- < 1.23.0
Running on/with
- n/a
Configuration 183
- < 1.17.0
Running on/with
- n/a
Configuration 184
- < 1.17.0
Running on/with
- n/a
Configuration 185
- < 2.24.0
Running on/with
- n/a
Configuration 186
- < 2.18.0
Running on/with
- n/a
Configuration 187
- < 1.18.0
Running on/with
- n/a
Configuration 188
- < 2.23.0
Running on/with
- n/a
Configuration 189
- < 1.31.0
Running on/with
- n/a
Configuration 190
- < 1.29.0
Running on/with
- n/a
Configuration 191
- < 1.22.8
Running on/with
- n/a
Configuration 192
- < 1.19.0
Running on/with
- n/a
Configuration 193
- < 2.17.0
Running on/with
- n/a
Configuration 194
- < 2.24.0
Running on/with
- n/a
Configuration 195
- < 1.30.3
Running on/with
- n/a
Configuration 196
- < 1.28.0
Running on/with
- n/a
Configuration 197
- < 1.26.0
Running on/with
- n/a
Configuration 198
- < 1.23.0
Running on/with
- n/a
Configuration 199
- < 1.19.0
Running on/with
- n/a
Configuration 200
- < 1.30.3
Running on/with
- n/a
Configuration 201
- < 1.28.0
Running on/with
- n/a
Configuration 202
- < 1.26.0
Running on/with
- n/a
Configuration 203
- < 1.23.0
Running on/with
- n/a
Configuration 204
- < 1.19.0
Running on/with
- n/a
Configuration 205
- < 2.28.0
Running on/with
- n/a
Configuration 206
- < 2.28.0
Running on/with
- n/a
Configuration 207
- < 2.26.0
Running on/with
- n/a
Configuration 208
- < 1.24.0
Running on/with
- n/a
Configuration 209
- < 1.24.0
Running on/with
- n/a
Configuration 210
- < 2.26.0
Running on/with
- n/a
Configuration 211
- < 1.13.0
Running on/with
- n/a
Configuration 212
- < 1.21.0
Running on/with
- n/a
Configuration 213
- < 1.20.0
Running on/with
- n/a
Configuration 214
- < 1.21.0
Running on/with
- n/a
Configuration 215
- < 1.20.0
Running on/with
- n/a
Configuration 216
- < 1.17.0
Running on/with
- n/a
Configuration 217
- < 1.21.0
Running on/with
- n/a
Configuration 218
- < 1.20.0
Running on/with
- n/a
Configuration 219
- < 1.24.0
Running on/with
- n/a
Configuration 220
- < 1.24.0
Running on/with
- n/a
Configuration 221
- < 1.24.0
Running on/with
- n/a
Configuration 222
- < 2.26.0
Running on/with
- n/a
Configuration 223
- < 1.13.0
Running on/with
- n/a
Configuration 224
- < 2.16.2
Running on/with
- n/a
Configuration 225
- < 2.16.2
Running on/with
- n/a
Configuration 226
- < 2.16.2
Running on/with
- n/a
Configuration 227
- < 1.17.0
Running on/with
- n/a
Configuration 228
- < 1.16.0
Running on/with
- n/a
Configuration 229
- < 1.16.0
Running on/with
- n/a
Configuration 230
- < 1.19.1
Configuration 231
- < 1.16.1
Configuration 232
- < 1.17.0
Running on/with
- n/a
Configuration 233
- < 1.19.0
Running on/with
- n/a
Configuration 234
- < 1.22.0
Running on/with
- n/a
Configuration 235
- < 1.19.0
Running on/with
- n/a
Configuration 236
- < 1.24.0
Running on/with
- n/a
Configuration 237
- < 1.1.28
Configuration 238
- < 2.10.0
Configuration 239
- < 1.7.0
Configuration 240
- < 1.22.0
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1 other source (CVE.org) ▾
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
NoTechnical Impact
TotalDecision
n/aAssessed Mar 26, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2023–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (7 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 0.16% (0.00160) | 4.44th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.16% (0.00160) | 5.49th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.04% (0.00038) | 8.28th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.04% (0.00042) | 5.07th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.04% (0.00042) | 5.63th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.04% (0.01036) | 43.31th | v2 (v2022.01.01) |
| Feb 1, 2023 | 1.04% (0.01036) | 42.62th | v2 (v2022.01.01) |
References (1)
- https://www.dell.com/support/kbdoc/000206038 vendor-advisoryVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://www.dell.com/support/kbdoc/000206038 | vendor-advisoryVendor Advisory |
Change history (0)
No recorded changes yet.