CVE-2023-32472: dell edge_gateway_3200_firmware Out-of-bounds Write

Vulnerability summary

CVE-2023-32472 is a high (CVSS 8.2) Out-of-bounds Write vulnerability in dell edge_gateway_3200_firmware. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.8% of scored vulnerabilities.

Timeline

1. 10-07-2024
   PublishedVulnerability first disclosed.
2. 26-09-2024
   Last modifiedVulnerability information updated.

Description

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some code in System Management Mode, leading to arbitrary code execution or escalation of privilege.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.