Out of Bounds Write Vulnerability in Dell PowerEdge and Precision Server BIOS
CVE-2023-25537

6.1MEDIUM

Key Information:

Vendor
Dell
Status
Poweredge Platform
Vendor
CVE Published:
22 May 2023

Summary

The BIOS of Dell PowerEdge 14G servers and Dell Precision devices prior to specified versions have a vulnerability that allows local attackers with low privileges to exploit an Out of Bounds write. This could potentially lead to exposure of crucial data in System Management Mode, enabling the execution of arbitrary code or escalation of privileges. It is essential for users to update to the latest BIOS versions to mitigate these risks.

Affected Version(s)

PowerEdge Platform BIOS Versions prior to 2.18.1

References

https://www.dell.com/support/kbdoc/en-us/000213550/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.