CVE-2023-28058
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Jun 23, 2023
Updated: Jun 27, 2023
CWE ID 20
Summary
CVE-2023-28058 refers to a vulnerability in Dell BIOS with an improper input validation issue. This flaw allows a local, authenticated user with administrator privileges to manipulate UEFI variables. By exploiting this weakness, an attacker could potentially install unauthorized software or alter system settings, posing a significant security risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share