CVE-2023-32461 — Dell / PowerEdge Platform

Description (CNA)

Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges.

Affected (CNA)

Vendor / product	Versions
Dell / PowerEdge Platform	affected Versions prior to 1.5.6; affected Versions prior to 1.1.3; affected Versions prior to 1.1.4; affected Versions prior to 1.2.5; affected Versions prior to 1.3.11; affected Versions prior to 1.10.2; affected Versions prior to 1.6.3; affected Versions prior to 1.10.4; affected Versions prior to 2.11.4; affected Versions prior to 2.11.3; affected Versions prior to Before 1.11.2

CWE

CWE-122

References

https://www.dell.com/support/kbdoc/en-us/000216543/dsa-2023-292-security-update-for-dell-poweredge-server-bios-vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000216543/dsa-2023-292-security-update-for-dell-poweredge-server-bios-vulnerability

CISA-ADP

No English description supplied.

No references supplied.