Description (CNA)
Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Dell / UEFI BIOS https stack | affected Gen 11, Gen 10 |
CWE
CWE-295
References
ADP enrichment
No English description supplied.