CVE-2023-43088 - OpenCVE

Dell Client BIOS contains a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device.

Attack Vector Physical

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Dell	Precision 7865 Tower Firmware Precision 7865 Tower

Configuration 1 [-]

AND

cpe:2.3:o:dell:precision_7865_tower_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:precision_7865_tower:-:*:*:*:*:*:*:*

References

Link	Resource
https://www.dell.com/support/kbdoc/en-us/000218223/dsa-2023-377	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: dell

Published: 2023-12-22T18:00:38.953Z

Updated: 2023-12-22T18:00:38.953Z

Reserved: 2023-09-15T07:03:52.367Z

Link: CVE-2023-43088

JSON object: View

NVD Information

Status : Analyzed

Published: 2023-12-22T18:15:07.550

Modified: 2024-01-04T14:53:55.977

Link: CVE-2023-43088

JSON object: View

Redhat Information

No data.

CWE

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:precision_7865_tower_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A95FD57A-B04D-4792-830D-1F31F43A5FEF", "versionEndExcluding": "1.5.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dell:precision_7865_tower:-:*:*:*:*:*:*:*", "matchCriteriaId": "75FF7571-FEF4-4973-9B31-9FF250F504A9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "\nDell Client BIOS contains a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device.\n\n"}, {"lang": "es", "value": "Dell Client BIOS contiene una vulnerabilidad de acceso directo a la memoria (DMA) previa al inicio. Un atacante autenticado con acceso f\u00edsico al sistema podr\u00eda explotar esta vulnerabilidad para ejecutar c\u00f3digo arbitrario en el dispositivo."}], "id": "CVE-2023-43088", "lastModified": "2024-01-04T14:53:55.977", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 6.0, "source": "security_alert@emc.com", "type": "Secondary"}]}, "published": "2023-12-22T18:15:07.550", "references": [{"source": "security_alert@emc.com", "tags": ["Vendor Advisory"], "url": "https://www.dell.com/support/kbdoc/en-us/000218223/dsa-2023-377"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-16"}], "source": "security_alert@emc.com", "type": "Secondary"}]}