Vulnerabilities > CVE-2023-28075 - Unspecified vulnerability in Dell products

047910
CVSS 6.3 - MEDIUM
Attack vector
PHYSICAL
Attack complexity
HIGH
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
high complexity
dell

Summary

Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.

Vulnerable Configurations

Part Description Count
OS
Dell
591
Hardware
Dell
242