8.2

CVE-2023-32467

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privilege.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Edge Gateway 5000 Firmware Version0.1.19.0
   Dell ≫ Edge Gateway 5000 Version-
Dell ≫ Edge Gateway 5100 Firmware Version0.1.19.0
   Dell ≫ Edge Gateway 5100 Version-
Dell ≫ Edge Gateway 5200 Firmware Version < 1.05.10
   Dell ≫ Edge Gateway 5200 Version-
Dell ≫ Edge Gateway 3200 Firmware Version-
   Dell ≫ Edge Gateway 3200 Version-
Dell ≫ Xps 13 9350 Firmware Version0.1.13.0
   Dell ≫ Xps 13 9350 Version-
Dell ≫ Chengming 3977 Firmware Version0.1.13.0
   Dell ≫ Chengming 3977 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.175
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.2 1.5 6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
security_alert@emc.com 5.7 1.5 3.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.