CVE-2023-32471

Published: Jul 24, 2024Modified: Jun 17, 2026

6.0

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Exploitability: 1.5 / Impact: 4.0

Source: NVD

Description

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability to read contents of stack memory and use this information for further exploits.

Affected (10)

Products: Dell: Edge Gateway 3200 Firmware, Edge Gateway 5200 Firmware, Precision 3930 Rack Firmware, Optiplex 7080 Firmware, Precision 5520 Firmware, Inspiron 7460 Firmware, Precision 5820 Tower Firmware, G5 5587 Firmware, G7 7588 Firmware, Vostro 15 7580 Firmware

Dell

10 products

Edge Gateway 3200 Firmware

Edge Gateway 5200 Firmware

Precision 3930 Rack Firmware

Optiplex 7080 Firmware

Precision 5520 Firmware

Inspiron 7460 Firmware

Precision 5820 Tower Firmware

G5 5587 Firmware

G7 7588 Firmware

Vostro 15 7580 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Edge Gateway 3200 Firmware	All versions

Running on/with	Platform Versions
Dell Edge Gateway 3200	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Edge Gateway 5200 Firmware	All versions

Running on/with	Platform Versions
Dell Edge Gateway 5200	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 3930 Rack Firmware	All versions

Running on/with	Platform Versions
Dell Precision 3930 Rack	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 7080 Firmware	All versions

Running on/with	Platform Versions
Dell Optiplex 7080	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 5520 Firmware	All versions

Running on/with	Platform Versions
Dell Precision 5520	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 7460 Firmware	All versions

Running on/with	Platform Versions
Dell Inspiron 7460	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 5820 Tower Firmware	All versions

Running on/with	Platform Versions
Dell Precision 5820 Tower	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell G5 5587 Firmware	All versions

Running on/with	Platform Versions
Dell G5 5587	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell G7 7588 Firmware	All versions

Running on/with	Platform Versions
Dell G7 7588	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vostro 15 7580 Firmware	All versions

Running on/with	Platform Versions
Dell Vostro 15 7580	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://www.dell.com/support/kbdoc/en-us/000214917/dsa-2023-225-security-update-for-dell-bios-edge-gateway-5200-and-edge-gateway-3200

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000214917/dsa-2023-225-security-update-for-dell-bios-edge-gateway-5200-and-edge-gateway-3200

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.