CVE-2023-28059

CVSS 3.1 Score 6.7 of 10 (medium)

Details

Published Jun 23, 2023
Updated: Jun 28, 2023
CWE ID 20

Summary

CVE-2023-28059 is a vulnerability affecting Dell BIOS that allows a local, authenticated user with administrator privileges to manipulate UEFI variables due to improper input validation. This issue may potentially be exploited to gain unauthorized access or modify system settings, posing a significant risk to the security of impacted systems. It is strongly recommended that affected organizations apply the available patch to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share