Lucene search

DellVULNRICHMENT:CVE-2023-32471

HistoryJul 24, 2024 - 7:08 a.m.

CVE-2023-32471

2024-07-2407:08:51

CWE-125

dell

github.com

dell edge gateway

bios

out-of-bounds read

vulnerability

stack memory

exploits

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

AI Score

5.7

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability to read contents of stack memory and use this information for further exploits.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:dell:dell_edge_gateway_5200:*:*:*:*:*:*:*:*"
    ],
    "vendor": "dell",
    "product": "dell_edge_gateway_5200",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "v1.05.10",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:2.3:h:dell:dell_edge_gateway_3200:*:*:*:*:*:*:*:*"
    ],
    "vendor": "dell",
    "product": "dell_edge_gateway_3200",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "v1.03.10",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.dell.com/support/kbdoc/en-us/000214917/dsa-2023-225-security-update-for-dell-bios-edge-gateway-5200-and-edge-gateway-3200

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

AI Score

5.7

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2023-32471