CVE-2023-32466
Last modified
CVE-2023-32466 is a medium-severity vulnerability rated 5.7/10 on the CVSS scale. Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privilege.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privilege.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Edge Gateway 3200 Firmware | < 1.03.10 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-32466?
How severe is CVE-2023-32466?
How do I fix CVE-2023-32466?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-32460 Dell PowerEdge BIOS contains an improper privilege manageme…7.8
- CVE-2023-32461 Dell PowerEdge BIOS and Dell Precision BIOS contain a buffe…6.7
- CVE-2023-32462 Dell OS10 Networking Switches running 10.5.2.x and above co…9.8
- CVE-2023-32463 Dell VxRail, version(s) 8.0.100 and earlier contain a denia…7.5
- CVE-2023-32464 Dell VxRail, versions prior to 7.0.450, contain an improper…3.3
- CVE-2023-32465 Dell Power Protect Cyber Recovery, contains an Authenticati…8.8
- CVE-2023-32467Dell Edge Gateway BIOS, versions 3200 and 5200, contains an …8.2
- CVE-2023-32468 Dell ECS Streamer, versions prior to 2.0.7.1, contain an in…4.9
- CVE-2023-32469 Dell Precision Tower BIOS contains an Improper Input Valida…6.7
- CVE-2023-3247In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.…4.3
- CVE-2023-32470 Dell Digital Delivery versions prior to 5.0.82.0 contain an…5.5
- CVE-2023-32471Dell Edge Gateway BIOS, versions 3200 and 5200, contains an …6
Are you affected by CVE-2023-32466?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST