CVE-2023-28075 (published 2023-08-16T19:15:41.959Z)

Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.


Affected products: Vendor: Dell
Product: CPG BIOS
Versions: All Versions