CVE-2013-3582
High
Description
Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbu_packet.pktNum value in conjunction with a crafted rbu_packet.pktSize value.
SeverityHigh
CVSS7.6
Exploit probability—
ProductDell Latitude
PublishedAug 28, 2013
First seenAug 28, 2013
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell latitude_d530 | No range specified | — |
| dell latitude_d531 | No range specified | — |
| dell latitude_d630 | No range specified | — |
| dell latitude_d631 | No range specified | — |
| dell latitude_d830 | No range specified | — |
| dell latitude_e4200 | No range specified | — |
| dell latitude_e4300 | No range specified | — |
| dell latitude_e5400 | No range specified | — |
| dell latitude_e5500 | No range specified | — |
| dell latitude_e6400 | No range specified | — |
| dell latitude_e6400_atg | No range specified | — |
| dell latitude_e6400_atg_xfr | No range specified | — |
| dell latitude_e6500 | No range specified | — |
| dell latitude_xt2 | No range specified | — |
| dell latitude_z600 | No range specified | — |
| dell precision_m2300 | No range specified | — |
| dell precision_m2400 | No range specified | — |
| dell precision_m4300 | No range specified | — |
| dell precision_m4400 | No range specified | — |
| dell precision_m6300 | No range specified | — |
| dell precision_m6400 | No range specified | — |
| dell precision_m6500 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.