CVE-2023-28075CWE-367

Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS

Medium · published August 16, 2023

CVSS v3.1
6.9
EPSS
0%
Percentile
7.9
In the wild
Unconfirmed
What it is

Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.

The record
Technical detail
CVSS v3.1
6.9 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00187 · 7.9th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2023-08-16T19:15Z
EPSS history
Timeline
  • 16 AUG 19:15Z
    Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS
    cvelistv5