Dell BIOS: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2023-39537

  Improper input validation in BIOS TCG2

  AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.

  AMI AptioV
  Nov 14, 2023
• Medium 6.7
  CVE-2023-39251

  Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potent…

  Dell CPG BIOS
  Dec 22, 2023

Revision history

1. 2024-06-13 #2

   Neue Updates von Dell aufgenommen

2. 2023-12-19 #1

   Initiale Fassung

References

• Dell Knowledge Base Article vom 2023-12-19
  https://www.dell.com/support/kbdoc/000213033/dsa-2023-=
• Dell Knowledge Base Article vom 2023-12-19
  https://www.dell.com/support/kbdoc/000217707/dsa-2023
• Dell Security Advisory DSA-2023-353 vom 2024-06-13
  https://www.dell.com/support/kbdoc/de-de/000219479/dsa-2023-353-security-update-for-dell-poweredge-t30-t40-mini-tower-server-for-an-ami-uefi-bios-vulnerability