SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2023-32471

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability.

MEDIUM 6.0EPSS 0.17%

Does this matter?

Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own.

Description

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability to read contents of stack memory and use this information for further exploits.

CVSS 3.1
6.0 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS
0.17% probability · 6th percentile
CISA KEV
Not listed
Weakness
CWE-125
Affected
dell/edge gateway 3200 firmware · dell/edge gateway 5200 firmware · dell/precision 3930 rack firmware · dell/optiplex 7080 firmware · dell/precision 5520 firmware · dell/inspiron 7460 firmware · dell/precision 5820 tower firmware · dell/g5 5587 firmware · dell/g7 7588 firmware · dell/vostro 15 7580 firmware
Source
security_alert@emc.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.