CVE-2023-43088 HIGH

CVE-2023-43088

Vendor Dell
Product CPG BIOS
Weakness CWE-16
Published December 22, 2023
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

7.2/10
Attack vector Physical
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Dell Client BIOS contains a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device.

Key dates

02Disclosure timeline

December 22, 2023 CVE published
August 2, 2024 Record updated