← Back

CVE-2023-32472

nvd nist
Published: Jul 10, 2024Modified: Nov 21, 2024

JSON object

Loading...
8.2
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Exploitability: 1.5 / Impact: 6.0
Source: NVD

Description

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some code in System Management Mode, leading to arbitrary code execution or escalation of privilege.

Affected (2)

Dell
2 products
Edge Gateway 3200 Firmware
Edge Gateway 5200 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Edge Gateway 3200 Firmware
All versions
Running on/withPlatform Versions
Dell
Edge Gateway 3200
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Edge Gateway 5200 Firmware
Before 1.05.10
Running on/withPlatform Versions
Dell
Edge Gateway 5200
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

Source: security_alert@emc.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.