Lucene search

DellCVELIST:CVE-2023-28074

HistoryJul 31, 2024 - 7:56 a.m.

CVE-2023-28074

2024-07-3107:56:01

CWE-125

dell

www.cve.org

dell bsafe crypto-c micro edition

buffer over-read

vulnerability

version 4.1.5

version 4.0

version 4.6.1

version 5.0

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.4%

JSON

Dell BSAFE Crypto-C Micro Edition, version 4.1.5, and Dell BSAFE Micro Edition Suite, versions 4.0 through 4.6.1 and version 5.0, contains an Out-of-bounds Read vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Dell BSAFE Micro Edition Suite",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "5.0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Dell BSAFE Micro Edition Suite",
    "vendor": "Dell",
    "versions": [
      {
        "lessThanOrEqual": "4.6.1",
        "status": "affected",
        "version": "4.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Dell BSAFE Crypto-C Micro Edition",
    "vendor": "Dell",
    "versions": [
      {
        "lessThanOrEqual": "4.1.5",
        "status": "affected",
        "version": "4.0",
        "versionType": "semver"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000212325/dsa-2023-120-dell-bsafe-micro-edition-suite-security-update

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.4%

JSON

Related for CVELIST:CVE-2023-28074