medium5.7
CVE-2023-32467
Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability.
Impact
Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privilege.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Edge Gateway 5000 Firmware | Version 0.1.19.0 |
| Dell | Edge Gateway 5100 Firmware | Version 0.1.19.0 |
| Dell | Edge Gateway 5200 Firmware | before 1.05.10 |
| Dell | Edge Gateway 3200 Firmware | All versions |
| Dell | Xps 13 9350 Firmware | Version 0.1.13.0 |
| Dell | Chengming 3977 Firmware | Version 0.1.13.0 |