CVE-2023-32471

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability to read contents of stack memory and use this information for further exploits.

Score

CVSS 3.1 6.0 Medium

Status

Modified - security_alert@emc.com

Published

2024-07-24

Last modified

2024-08-02

Weaknesses

CWE-125

Affected products

• Dell Edge Gateway 3200 (Dell)
• Dell Edge Gateway 5200 (Dell)
• Edge Gateway 3200 Firmware (Dell)
• Edge Gateway 5200 Firmware (Dell)
• G5 5587 Firmware (Dell)
• G7 7588 Firmware (Dell)
• Inspiron 7460 Firmware (Dell)
• Optiplex 7080 Firmware (Dell)
• Precision 3930 Rack Firmware (Dell)
• Precision 5520 Firmware (Dell)
• Precision 5820 Tower Firmware (Dell)
• Vostro 15 7580 Firmware (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000214917/dsa-2023-225-security-update-for-dell-bios-edge-gateway-5200-and-edg…