6.8
Medium
CVE-2023-48674 Dell Platform BIOS contains an Improper Null Termination vulnerability
Description
Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send malicious data to the device in order to cause some services to cease to function.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CPG BIOS 3.20 | earliest → < 3.20.0 | 3.20.0 |
| CPG BIOS 1.32 | earliest → < 1.32.0 | 1.32.0 |
| CPG BIOS 1.28 | earliest → < 1.28.0 | 1.28.0 |
| CPG BIOS 1.27 | earliest → < 1.27.1 | 1.27.1 |
| CPG BIOS 1.26 | earliest → < 1.26.0 | 1.26.0 |
| CPG BIOS 1.24 | earliest → < 1.24.0 | 1.24.0 |
| CPG BIOS 1.20 | earliest → < 1.20.0 | 1.20.0 |
| CPG BIOS 1.17 | earliest → < 1.17.0 | 1.17.0 |
| CPG BIOS 1.12 | earliest → < 1.12.0 | 1.12.0 |
Other CVEs of CPG BIOS
The 110 CVEs of CPG BIOS →
CVE-2024-0158
Dell BIOS contains an improper input validation vulnerability
5.1
Medium
CVE-2024-32855
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component
3.8
Low
CVE-2024-32860
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
High
CVE-2024-32858
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
High