PT-2023-21536

CVE-2023-28075

·

Published

2023-08-16

·

Updated

2023-08-22

Description by

CVSS 3.1
6.9
Medium
MetricsAV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Dell BIOS (affected versions not specified)
Description A Time-of-check Time-of-use vulnerability exists in Dell BIOS, allowing a local authenticated malicious user with physical access to the system to potentially exploit this issue. The exploitation could occur by using a specifically timed DMA transaction during an SMI, which could lead to arbitrary code execution on the system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾