CVE Feed

    Dashboard / CVE / CVE-2023-32467

    CVE-2023-32467

    Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privilege.

    Published:Jul 10, 2024
    Last Modified:Nov 21, 2024
    EPS:Jul 10, 2024
    EPSS Score:0.00057
    CVSS Score:5.7

    Affected Products

    Vendor
    Dell
    Product
    Chengming 3977
    Vendor
    Dell
    Product
    Chengming 3977 Firmware
    Vendor
    Dell
    Product
    Edge Gateway 3200
    Vendor
    Dell
    Product
    Edge Gateway 3200 Firmware
    Vendor
    Dell
    Product
    Edge Gateway 5000
    Vendor
    Dell
    Product
    Edge Gateway 5000 Firmware
    Vendor
    Dell
    Product
    Edge Gateway 5100
    Vendor
    Dell
    Product
    Edge Gateway 5100 Firmware
    Vendor
    Dell
    Product
    Edge Gateway 5200
    Vendor
    Dell
    Product
    Edge Gateway 5200 Firmware
    Vendor
    Dell
    Product
    Xps 13 9350
    Vendor
    Dell
    Product
    Xps 13 9350 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-665 Improper Initialization

    Related CVEs

    CVE-2022-24410 (CVSS 6.8) — Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical acc…
    CVE-2021-36343 (CVSS 7.5) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potent…
    CVE-2021-36342 (CVSS 7.5) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potent…
    CVE-2021-36325 (CVSS 7.5) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potent…
    CVE-2021-36324 (CVSS 7.5) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potent…
    CVE-2021-36323 (CVSS 7.5) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potent…
    CVE-2021-21551 (CVSS 8.8) — Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation …
    CVE-2020-5362 (CVSS 7.1) — Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Mana…
    CVE-2019-3717 (CVSS 6.8) — Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An unauthentica…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High