CVSS: 6.7EPSS: 0%CPEs: 876EXPL: 0CVE-2023-28054
https://notcve.org/view.php?id=CVE-2023-28054
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. • https://www.dell.com/support/kbdoc/en-us/000212204/dsa-2023-099-dell-client-bios-security-update-for-multiple-improper-input-validation-vulnerabilities • CWE-20: Improper Input Validation •
CVSS: 6.7EPSS: 0%CPEs: 876EXPL: 0CVE-2023-28052
https://notcve.org/view.php?id=CVE-2023-28052
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. • https://www.dell.com/support/kbdoc/en-us/000212204/dsa-2023-099-dell-client-bios-security-update-for-multiple-improper-input-validation-vulnerabilities • CWE-20: Improper Input Validation •
CVSS: 6.7EPSS: 0%CPEs: 876EXPL: 0CVE-2023-25936
https://notcve.org/view.php?id=CVE-2023-25936
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. • https://www.dell.com/support/kbdoc/en-us/000212204/dsa-2023-099-dell-client-bios-security-update-for-multiple-improper-input-validation-vulnerabilities • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0CVE-2020-29492
https://notcve.org/view.php?id=CVE-2020-29492
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable file and manipulate the configuration of any target specific station. Dell Wyse ThinOS versiones 8.6 y anteriores, contienen una vulnerabilidad de configuración predeterminada no segura. Un atacante remoto no autenticado podría potencialmente explotar esta vulnerabilidad para acceder al archivo grabable y manipular la configuración de cualquier estación específica objetivo. • https://www.dell.com/support/kbdoc/en-us/000180768/dsa-2020-281 • CWE-276: Incorrect Default Permissions •
CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0CVE-2020-29491
https://notcve.org/view.php?id=CVE-2020-29491
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin clients. Dell Wyse ThinOS versiones 8.6 y anteriores, contienen una vulnerabilidad de configuración predeterminada no segura. Un atacante remoto no autenticado podría potencialmente explotar esta vulnerabilidad para obtener acceso a la información confidencial en la red local, conllevando a un potencial compromiso de los clientes ligeros afectados. • https://www.dell.com/support/kbdoc/en-us/000180768/dsa-2020-281 • CWE-276: Incorrect Default Permissions •