Описание
Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.13.2 (исключая)
Одновременно
cpe:2.3:o:dell:g7_17_7790_bios:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:g7_17_7790:-:*:*:*:*:*:*:*
EPSS
Процентиль: 14%
0.00046
Низкий
6.8 Medium
CVSS3
7.2 High
CVSS2
Дефекты
CWE-416
CWE-416
Связанные уязвимости
github
больше 3 лет назад
Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).
EPSS
Процентиль: 14%
0.00046
Низкий
6.8 Medium
CVSS3
7.2 High
CVSS2
Дефекты
CWE-416
CWE-416