CVE-2023-32472: High severity dell edge gateway 3200 firmware vulnerability
Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some code in System Management Mode, leading to arbitrary code execution or escalation of privilege.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32472?
CVE-2023-32472 is considered a high-severity vulnerability due to its potential for arbitrary code execution by a local authenticated user.
How do I fix CVE-2023-32472?
To mitigate CVE-2023-32472, update the Dell Edge Gateway BIOS to the latest firmware version provided by Dell.
Who is affected by CVE-2023-32472?
CVE-2023-32472 affects users of the Dell Edge Gateway 3200 and 5200 firmware versions 3200 and below, as well as 5200 versions prior to 1.05.10.
What could an attacker achieve by exploiting CVE-2023-32472?
An attacker exploiting CVE-2023-32472 could gain exposure to sensitive code in System Management Mode, potentially leading to unauthorized arbitrary code execution.
Is CVE-2023-32472 exploitable remotely?
No, CVE-2023-32472 is not remotely exploitable as it requires local authenticated access to exploit.