WID-SEC-W-2023-0991

DeutschShown in its original language — a full translation is planned for a future version.

Dell Computer: Mehrere Schwachstellen

view advisory published 2023-04-17

Ein lokaler Angreifer kann mehrere Schwachstellen in Dell Computer und Insyde UEFI Firmware ausnutzen, um Informationen offenzulegen und weitere nicht spezifizierte Auswirkungen zu verursachen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-38489US	—	0.16% (5th)	—	2026-09-03
HDD password plaintext is stored in a UEFI variable.
CVE-2022-29276US	high8.2	0.20% (10th)	—	2022-11-15
SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM. This issue was dis…

references

External citations — patches, advisories, analysis.

WID-SEC-W-2023-0991 - CSAF Versionself
WID-SEC-2023-0991 - Portal Versionself
Dell Security Advisory vom 2023-04-17external
Insyde Security Advisoryexternal
Insyde Security Advisoryexternal

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan