ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-25537

—
CVSS 3.1
7.8 high
EPSS
<1%p8
Published
()
Modified
Description

Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege.

Vendors
dell
Products
poweredge r740 firmware, poweredge r740xd firmware, poweredge r640 firmware, poweredge r940 firmware, poweredge r540 firmware, poweredge r440 firmware, poweredge t440 firmware, poweredge xr2 firmware, poweredge r740xd2 firmware, poweredge r840 firmware, poweredge r940xa firmware, poweredge t640 firmware
Weakness
CWE-787
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.