Описание
Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28 contain a UAF vulnerability in EFI_BOOT_SERVICES in system management mode. A local unauthenticated attacker may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in system management mode.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до a28 (исключая)
Одновременно
cpe:2.3:o:dell:latitude_7202_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_7202:-:*:*:*:*:*:*:*
EPSS
Процентиль: 31%
0.00115
Низкий
6.8 Medium
CVSS3
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-416
CWE-416
Связанные уязвимости
github
больше 3 лет назад
Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28 contain a UAF vulnerability in EFI_BOOT_SERVICES in system management mode. A local unauthenticated attacker may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in system management mode.
EPSS
Процентиль: 31%
0.00115
Низкий
6.8 Medium
CVSS3
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-416
CWE-416