Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.
Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2023-31800 | Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system. |
Tue, 08 Oct 2024 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Dell cpg Bios
|
|
| CPEs | cpe:2.3:o:dell:cpg_bios:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Dell cpg Bios
|
|
| Metrics |
ssvc
|
Subscriptions
Status: PUBLISHED
Assigner: dell
Published:
Updated: 2024-10-08T19:02:39.400Z
Reserved: 2023-03-10T05:07:55.141Z
Link: CVE-2023-28075
Updated: 2024-08-02T12:30:23.618Z
Status : Modified
Published: 2023-08-16T20:15:09.427
Modified: 2024-11-21T07:54:20.853
Link: CVE-2023-28075
No data.
OpenCVE Enrichment
No data.
EUVD