CVE-2023-32467

July 10, 2024, 3:15 a.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Dell Edge Gateway BIOS

  • 3200
  • 5200

Source

security_alert@emc.com

Tags

CVE-2023-32467 details

Published : July 10, 2024, 3:15 a.m.
Last Modified : July 10, 2024, 3:15 a.m.

Description

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privilege.

CVSS Score

1 2 3 4 5.7 6 7 8 9 10

Weakness

Weakness Name Description
CWE-665 Improper Initialization The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

CVSS Data

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

Base Score

5.7

Exploitability Score

1.5

Impact Score

3.7

Base Severity

MEDIUM

This website uses the NVD API, but is not approved or certified by it.