Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f88f-9mmf-7xm6

Опубликовано: 22 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege.

Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege.

EPSS

Процентиль: 10%
0.00034
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 6.1
nvd
больше 2 лет назад

Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege.

CVSS3: 7.8
fstec
больше 2 лет назад

Уязвимость микропрограммного обеспечения серверов Dell PowerEdge 14G и стоечных рабочих станций Dell Precision, связанная с записью за границами буфера, позволяющая нарушителю выполнить произвольный код или повысить свои привилегии

EPSS

Процентиль: 10%
0.00034
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-787