CVE-2023-28075

Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.

Score
CVSS 3.1 6.9 Medium
Status
Modified - security_alert@emc.com
Published
2023-08-16
Last modified
2024-10-08
Weaknesses
CWE-367

Affected products

References

 
 
© AVABIS GmbH privacypolicy about