WID-SEC-W-2023-1507

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Dell PowerEdge BIOS: Mehrere Schwachstellen ermöglichen Manipulation von Daten

view advisory published 2023-06-19

Ein lokaler Angreifer kann mehrere Schwachstellen im BIOS von Dell PowerEdge Systemen ausnutzen, um Daten in UEFI Variablen zu manipulieren.

01

describes (26)

Related CVEs.

IDseverity exploitable
CVE-2023-28060USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28058USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28050USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28044USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28036USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28034USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28031USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28027USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28026USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-25938USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28061USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28059USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28054USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28052USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28042USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28041USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28040USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28039USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28035USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28033USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
showing 20 of 26
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan