CVE-2023-32467
Last modified
CVE-2023-32467 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privilege.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privilege.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Edge Gateway 5000 Firmware | 0.1.19.0 |
| Dell | Edge Gateway 5100 Firmware | 0.1.19.0 |
| Dell | Edge Gateway 5200 Firmware | < 1.05.10 |
| Dell | Edge Gateway 3200 Firmware | All versions |
| Dell | Xps 13 9350 Firmware | 0.1.13.0 |
| Dell | Chengming 3977 Firmware | 0.1.13.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-32467?
How severe is CVE-2023-32467?
How do I fix CVE-2023-32467?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-32461 Dell PowerEdge BIOS and Dell Precision BIOS contain a buffe…6.7
- CVE-2023-32462 Dell OS10 Networking Switches running 10.5.2.x and above co…9.8
- CVE-2023-32463 Dell VxRail, version(s) 8.0.100 and earlier contain a denia…7.5
- CVE-2023-32464 Dell VxRail, versions prior to 7.0.450, contain an improper…3.3
- CVE-2023-32465 Dell Power Protect Cyber Recovery, contains an Authenticati…8.8
- CVE-2023-32466Dell Edge Gateway BIOS, versions 3200 and 5200, contains an …5.7
- CVE-2023-32468 Dell ECS Streamer, versions prior to 2.0.7.1, contain an in…4.9
- CVE-2023-32469 Dell Precision Tower BIOS contains an Improper Input Valida…6.7
- CVE-2023-3247In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.…4.3
- CVE-2023-32470 Dell Digital Delivery versions prior to 5.0.82.0 contain an…5.5
- CVE-2023-32471Dell Edge Gateway BIOS, versions 3200 and 5200, contains an …6
- CVE-2023-32472Dell Edge Gateway BIOS, versions 3200 and 5200, contains an …8.2
Are you affected by CVE-2023-32467?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST