5.7
CVE-2023-32466
- EPSS 0.07%
- Veröffentlicht 24.07.2024 07:15:01
- Zuletzt bearbeitet 21.11.2024 08:03:24
- Quelle security_alert@emc.com
- Teams Watchlist Login
- Unerledigt Login
Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privilege.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Edge Gateway 3200 Firmware Version < 1.03.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.07% | 0.216 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.7 | 1.5 | 3.7 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
|
| security_alert@emc.com | 5.7 | 1.5 | 3.7 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.