Description
Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send malicious data to the device in order to cause some services to cease to function.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | CPG BIOS | N/A – < 1.28.0, N/A – < 1.27.1, N/A – < 1.24.0, N/A – < 1.12.0, N/A – < 1.32.0, N/A – < 1.26.0, N/A – < 1.27.0, N/A – < 1.11.0, N/A – < 1.20.0, N/A – < 1.9.0, N/A – < 3.20.0, N/A – < 1.17.0 | 1.28.0 |
Advisories 1
- WID-SEC-2024-0360 Dell BIOS: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Feb 13, 2024
References
- https://www.dell.com/support/kbdoc/en-us/000220410/dsa-2023-467 vendor-advisory