DeutschShown in its original language — a full translation is planned for a future version.
Dell BIOS: Mehrere Schwachstellen
view advisory published 2024-09-16
Ein lokaler Angreifer kann mehrere Schwachstellen in Dell BIOS ausnutzen, um beliebigen Code auszuführen, den Stapelspeicher zu manipulieren, Informationen aus dem SMRAM in den Kernelbereich zu lecken, eine Denial-of-Service-Situation zu schaffen oder seine Privilegien zu erhöhen und die Sicherheitsmechanismen des Betriebssystems zu umgehen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-33657US | — | — | ||
This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak information from SMRAM to kernel space, p… | ||||
| CVE-2024-33656US | — | — | ||
The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privilege escalation, arbitrary code execution,… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan