7.8

CVE-2023-28073

Dell BIOS contains an improper authentication vulnerability. A locally authenticated malicious user may potentially exploit this vulnerability by bypassing certain authentication mechanisms in order to elevate privileges on the system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Precision 3570 Firmware Version < 1.13.2
   Dell ≫ Precision 3570 Version -
Dell ≫ Latitude 5530 Firmware Version < 1.13.2
   Dell ≫ Latitude 5530 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.077
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EMC 8.2 1.5 6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

https://www.dell.com/support/kbdoc/en-us/000213032/dsa-2023-160-dell-client
Vendor Advisory