CVE-2023-32467
Medium
Description
Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privilege.
SeverityMedium
CVSS5.7
Exploit probability—
ProductDell Edge Gateway 5000 Firmware
PublishedJul 10, 2024
First seenJul 10, 2024
Weakness typeCWE-665CWE-665
How to fix
Update
- dell edge_gateway_5200_firmware1.05.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell edge_gateway_5000_firmware | 0.1.19.0 | — |
| dell edge_gateway_5100_firmware | 0.1.19.0 | — |
| dell edge_gateway_5200_firmware | v < 1.05.10 | 1.05.10 |
| dell edge_gateway_3200_firmware | No range specified | — |
| dell xps_13_9350_firmware | 0.1.13.0 | — |
| dell chengming_3977_firmware | 0.1.13.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.