VulnerabilityModified

CVE-2023-43088

Dell Client BIOS contains a pre-boot direct memory access (DMA) vulnerability.

MEDIUM 6.8EPSS 0.28%

Does this matter?

Lower severity and a low EPSS score (0.28%). Track it; it rarely justifies an emergency change on its own.

Description

Dell Client BIOS contains a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device.

CVSS 3.1: 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.28% probability · 20th percentile
CISA KEV: Not listed
Weakness: CWE-16
Affected: dell/precision 7865 tower firmware
Source: security_alert@emc.com

References

https://www.dell.com/support/kbdoc/en-us/000218223/dsa-2023-377Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000218223/dsa-2023-377Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.