Unrated severityNVD Advisory· Published May 22, 2023· Updated Jan 21, 2025

CVE-2023-25537

Description

Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/PowerEdge 14Gllm-create
Range: <2.18.1
Dell/Precision BIOSllm-fuzzy
Range: <2.18.2
Dell/PowerEdge Platformcpe-rescue
Range: Versions prior to 2.18.1

Patches

Vulnerability mechanics

References

www.dell.com/support/kbdoc/en-us/000213550/dsa-2023-098-security-update-for-dell-poweredge-14g-server-bios-for-an-out-of-bounds-write-vulnerabilitymitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000