← back
CVE-2013-3582

CVE-2013-3582

EPSS 2.6%
Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbu_packet.pktNum value in conjunction with a crafted rbu_packet.pktSize value.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdfhttps://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdfhttps://www.blackhat.com/us-13/archives.html#Butterworthhttp://www.kb.cert.org/vuls/id/912156http://www.kb.cert.org/vuls/id/BLUU-99HSLA