CVE-2023-32472
Last modified
CVE-2023-32472 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some code in System Management Mode, leading to arbitrary code execution or escalation of privilege.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some code in System Management Mode, leading to arbitrary code execution or escalation of privilege.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Edge Gateway 3200 Firmware | All versions |
| Dell | Edge Gateway 5200 Firmware | < 1.05.10 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-32472?
How severe is CVE-2023-32472?
How do I fix CVE-2023-32472?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-32467Dell Edge Gateway BIOS, versions 3200 and 5200, contains an …8.2
- CVE-2023-32468 Dell ECS Streamer, versions prior to 2.0.7.1, contain an in…4.9
- CVE-2023-32469 Dell Precision Tower BIOS contains an Improper Input Valida…6.7
- CVE-2023-3247In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.…4.3
- CVE-2023-32470 Dell Digital Delivery versions prior to 5.0.82.0 contain an…5.5
- CVE-2023-32471Dell Edge Gateway BIOS, versions 3200 and 5200, contains an …6
- CVE-2023-32474 Dell Display Manager application, version 2.1.1.17 and prio…6.6
- CVE-2023-32475Dell BIOS contains a missing support for integrity check vul…7.6
- CVE-2023-32476 Dell Hybrid Client version 2.0 contains a Sensitive Data Ex…5.5
- CVE-2023-32477 Dell Common Event Enabler 8.9.8.2 for Windows and prior, co…7.8
- CVE-2023-32478 Dell PowerStore versions prior to 3.5.0.1 contain an insert…4.9
- CVE-2023-32479 Dell Encryption, Dell Endpoint Security Suite Enterprise, a…7.8
Are you affected by CVE-2023-32472?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST