CVE-2023-28075

Summary

CVE-2023-28075 is a Time-of-check Time-of-use vulnerability affecting Dell BIOS. This issue allows a local authenticated attacker with physical access to the system to execute arbitrary code. By manipulating the timing of DMA transactions during a System Management Interrupt (SMI), an attacker can bypass BIOS checks and gain unauthorized control over the system. This vulnerability poses a significant risk to security, particularly in environments where system access is not closely monitored. Organizations are strongly encouraged to apply the available patches to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.