CVE-2023-48674

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send malicious data to the device in order to cause some services to cease to function.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-170

Affected software

No affected versions have been published.

Timeline

Published
Mar 1, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-486767.1Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect CCVE-2023-486777.8Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (WindoCVE-2023-486785.5Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Linux, WCVE-2023-486795.4Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: AcroniCVE-2023-48688.8A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been declared as problematic. Affected by this vulnerability is CVE-2023-486805.5Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber ProteCVE-2023-486816.1Self cross-site scripting (XSS) vulnerability in storage nodes search field. The following products are affected: Acronis Cyber Protect 16 (CVE-2023-486825.4Stored cross-site scripting (XSS) vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows)CVE-2023-486837.1Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect CCVE-2023-486847.1Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect CCVE-2023-486859.8Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'psd' parameter of the login.phCVE-2023-486879.8Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'from' parameter of the reserva
CVE-2023-48674: Medium severity, CVSS 4.9 | Vulnix