CVE Feed

    Dashboard / CVE / CVE-2013-3582

    CVE-2013-3582

    Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbu_packet.pktNum value in conjunction with a crafted rbu_packet.pktSize value.

    Published:Aug 28, 2013
    Last Modified:Apr 11, 2025
    EPS:Aug 28, 2013
    EPSS Score:0.01111
    CVSS Score:7.6

    Affected Products

    Vendor
    Dell
    Product
    Latitude D530
    Vendor
    Dell
    Product
    Latitude D531
    Vendor
    Dell
    Product
    Latitude D630
    Vendor
    Dell
    Product
    Latitude D631
    Vendor
    Dell
    Product
    Latitude D830
    Vendor
    Dell
    Product
    Latitude E4200
    Vendor
    Dell
    Product
    Latitude E4300
    Vendor
    Dell
    Product
    Latitude E5400
    Vendor
    Dell
    Product
    Latitude E5500
    Vendor
    Dell
    Product
    Latitude E6400
    Vendor
    Dell
    Product
    Latitude E6400 Atg
    Vendor
    Dell
    Product
    Latitude E6400 Atg Xfr
    Vendor
    Dell
    Product
    Latitude E6500
    Vendor
    Dell
    Product
    Latitude Xt2
    Vendor
    Dell
    Product
    Latitude Z600
    Vendor
    Dell
    Product
    Precision M2300
    Vendor
    Dell
    Product
    Precision M2400
    Vendor
    Dell
    Product
    Precision M4300
    Vendor
    Dell
    Product
    Precision M4400
    Vendor
    Dell
    Product
    Precision M6300
    Vendor
    Dell
    Product
    Precision M6400
    Vendor
    Dell
    Product
    Precision M6500

    Exploits

    https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdfhttps://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdfhttps://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdfhttps://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdf

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High