ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-25937

—
CVSS 3.1
6.7 medium
EPSS
<1%p6
Published
()
Modified
Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.

Vendors
dell
Products
alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r11 firmware, alienware aurora r12 firmware, alienware aurora r13 firmware, alienware aurora r15 firmware, alienware m15 r2 firmware, alienware m15 r3 firmware, alienware m15 r4 firmware, alienware m15 r6 firmware, alienware m15 r7 firmware, alienware m16 firmware
Weakness
CWE-20
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.