Lucene search

[email protected]CVE-2013-3582

HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-3582

2022-10-0316:14:46

CWE-119

[email protected]

web.nvd.nist.gov

dell

bios

buffer overflow

cve-2013-3582

dell latitude

dell precision

security vulnerability

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.3%

JSON

Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbu_packet.pktNum value in conjunction with a crafted rbu_packet.pktSize value.

Affected configurations

NVD

Node

delllatitude_d530Match-

delllatitude_d531Match-

delllatitude_d630Match-

delllatitude_d631Match-

delllatitude_d830Match-

delllatitude_e4200Match-

delllatitude_e4300Match-

delllatitude_e5400Match-

delllatitude_e5500Match-

delllatitude_e6400Match-

delllatitude_e6400_atgMatch-

delllatitude_e6400_atg_xfrMatch-

delllatitude_e6500Match-

delllatitude_xt2Match-

delllatitude_z600Match-

dellprecision_m2300Match-

dellprecision_m2400Match-

dellprecision_m4300Match-

dellprecision_m4400Match-

dellprecision_m6300Match-

dellprecision_m6400Match-

dellprecision_m6500Match-

CPENameOperatorVersion
dell:latitude_d530dell latitude d530eq-
dell:latitude_d531dell latitude d531eq-
dell:latitude_d630dell latitude d630eq-
dell:latitude_d631dell latitude d631eq-
dell:latitude_d830dell latitude d830eq-
dell:latitude_e4200dell latitude e4200eq-
dell:latitude_e4300dell latitude e4300eq-
dell:latitude_e5400dell latitude e5400eq-
dell:latitude_e5500dell latitude e5500eq-
dell:latitude_e6400dell latitude e6400eq-

CPE	Name	Operator	Version
dell:latitude_d530	dell latitude d530	eq	-
dell:latitude_d531	dell latitude d531	eq	-
dell:latitude_d630	dell latitude d630	eq	-
dell:latitude_d631	dell latitude d631	eq	-
dell:latitude_d830	dell latitude d830	eq	-
dell:latitude_e4200	dell latitude e4200	eq	-
dell:latitude_e4300	dell latitude e4300	eq	-
dell:latitude_e5400	dell latitude e5400	eq	-
dell:latitude_e5500	dell latitude e5500	eq	-
dell:latitude_e6400	dell latitude e6400	eq	-

Rows per page:

1-10 of 221

References

www.kb.cert.org/vuls/id/912156

www.kb.cert.org/vuls/id/BLUU-99HSLA

media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdf

media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdf

www.blackhat.com/us-13/archives.html#Butterworth

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.3%

JSON

Related for CVE-2013-3582

nvd1 cert1 prion1 cvelist1