WID-SEC-W-2023-1507

csafDEcert_bund

DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.

Dell PowerEdge BIOS: Mehrere Schwachstellen ermöglichen Manipulation von Daten

Advisory ansehen veröffentlicht 2023-06-19

Ein lokaler Angreifer kann mehrere Schwachstellen im BIOS von Dell PowerEdge Systemen ausnutzen, um Daten in UEFI Variablen zu manipulieren.

01

beschreibt (26)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2023-28060USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28058USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28050USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28044USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28036USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28034USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28031USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28027USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28026USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-25938USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28061USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28059USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28054USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28052USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28042USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28041USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28040USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28039USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28035USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
CVE-2023-28033USmedium6.7—
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in ord…
20 von 26 angezeigt
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan