CVE-2023-32472

MEDIUM

Dell Edge Gateway 3200 and 5200 Firmware - Authenticated Out-of-Bounds Write

Title source: llm

Description

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some code in System Management Mode, leading to arbitrary code execution or escalation of privilege.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory

https://www.dell.com/support/kbdoc/en-in/000214917/dsa-2023-225-security-update-for-dell-bios-edge-gateway-5200-and-edge-gateway-3200

Scores

CVSS v3 5.7

EPSS 0.0010

EPSS Percentile 28.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-787

Status published

Products (2)

dell/edge_gateway_3200_firmware

dell/edge_gateway_5200_firmware < 1.05.10

Published Jul 10, 2024

Tracked Since Feb 18, 2026