NetSight
medium6.8

CVE-2023-48674

Dell Platform BIOS contains an Improper Null Termination vulnerability.

Impact

Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send malicious data to the device in order to cause some services to cease to function.

Affected products

VendorProductAffected versions
DellPrecision 3430 Tower Firmware
before 1.28.0
DellPrecision 3431 Tower Firmware
before 1.24.0
DellPrecision 3630 Tower Firmware
before 2.26.0
DellPrecision 5820 Tower Firmware
before 2.34.0
DellPrecision 7820 Tower Firmware
before 2.38.0
DellPrecision 7920 Tower Firmware
before 2.38.0
DellLatitude 5280 Firmware
before 1.34.0
DellLatitude 5288 Firmware
before 1.34.0
DellLatitude 5290 Firmware
before 1.33.0
DellLatitude 5290 2-In-1 Firmware
before 1.32.0
DellLatitude 5300 Firmware
before 1.29.0
DellLatitude 5300 2-In-1 Firmware
before 1.29.0

Weakness classification

References