Description

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privilege.

Related CPE's

o

dell

edge_gateway_5000_firmware

0.1.19.0

Vulnerable

h

dell

edge_gateway_5000

-

o

dell

edge_gateway_5100_firmware

0.1.19.0

Vulnerable

h

dell

edge_gateway_5100

-

o

dell

edge_gateway_5200_firmware

Vulnerable

h

dell

edge_gateway_5200

-

o

dell

edge_gateway_3200_firmware

-

Vulnerable

h

dell

edge_gateway_3200

-

o

dell

xps_13_9350_firmware

0.1.13.0

Vulnerable

h

dell

xps_13_9350

-

o

dell

chengming_3977_firmware

0.1.13.0

Vulnerable

h

dell

chengming_3977

-

References

https://www.dell.com/support/kbdoc/en-in/000214917/dsa-2023-225-security-update-for-dell-bios-edge-gateway-5200-and-edge-gateway-3200

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-665

[email protected]

Secondary
CWE-665

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

8.2 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2024-07-10T03:15:01.870

3 months ago

Last modified

2024-09-10T20:00:45.843

1 month ago