Jiawei Yin

The issue is related to improper input validation in the SMM handler, which may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Name of the Vulnerable Software and Affected Versions: Dell Edge Gateway BIOS versions 3200 and 5200 Description: The issue is related to an out-of-bounds write vulnerability in the Dell Edge Gateway BIOS. A local authenticated malicious user with high privileges could potentially exploit this vulnerability, leading to exposure of some UEFI code, which could result in arbitrary code execution or escalation of privilege. The vulnerability is also associated with incorrect initialization of a resource in the DXE driver of the BIOS firmware. Recommendations: For versions 3200 and 5200, update the BIOS to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to improper input validation in the BIOS firmware, which may allow a privileged user to enable escalation of privilege via local access.

The issue is related to improper input validation in the BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access.

The issue is related to improper input validation in the BIOS firmware for some Intel(R) Processors. This may allow a privileged user to potentially enable escalation of privilege via local access.

The issue is related to an improper input validation vulnerability in Dell BIOS. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

The issue is related to a failure to verify the protocol in SMM, which may allow an attacker to control the protocol and modify SPI flash, potentially resulting in arbitrary code execution.