Out-of-bounds read in Dell Edge Gateway 5200
Priority LOW 28CWE-125Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-125 and the CVSS impact.
Summary
Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability to read contents of stack memory and use this information for further exploits.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00167 6th percentileScored 2026-11-07
Fix Fixed Dell Edge Gateway 5200 (Dell): v1.05.10Dell Edge Gateway 3200 (Dell): v1.03.10
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dell | Dell Edge Gateway 5200 | N/A to before v1.05.10 | v1.05.10 | Patch available | CNA |
| Dell | Dell Edge Gateway 3200 | N/A to before v1.03.10 | v1.03.10 | Patch available | CNA |
- Dell Edge Gateway 5200 VendorDell Affected N/A to before v1.05.10 Fixed in v1.05.10 Patch available CNA
- Dell Edge Gateway 3200 VendorDell Affected N/A to before v1.03.10 Fixed in v1.03.10 Patch available CNA
CPE configurations NVD · 20
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:edge_gateway_3200_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dell |
| cpe:2.3:h:dell:edge_gateway_3200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:edge_gateway_5200_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dell |
| cpe:2.3:h:dell:edge_gateway_5200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3930_rack_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3930_rack:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_7080_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_7080:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_5520_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_5520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:edge_gateway_3200_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dell
- cpe:2.3:h:dell:edge_gateway_3200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:edge_gateway_5200_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dell
- cpe:2.3:h:dell:edge_gateway_5200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3930_rack_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3930_rack:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_7080_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_7080:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_5520_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dell
- cpe:2.3:h:dell:precision_5520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Show 10 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:inspiron_7460_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_7460:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_5820_tower_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_5820_tower:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:g5_5587_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dell |
| cpe:2.3:h:dell:g5_5587:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:g7_7588_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dell |
| cpe:2.3:h:dell:g7_7588:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_15_7580_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_15_7580:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:inspiron_7460_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_7460:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_5820_tower_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dell
- cpe:2.3:h:dell:precision_5820_tower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:g5_5587_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dell
- cpe:2.3:h:dell:g5_5587:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:g7_7588_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dell
- cpe:2.3:h:dell:g7_7588:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_15_7580_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_15_7580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Remediation
- Fix · CNA Dell Edge Gateway 5200 (Dell) Fixed in v1.05.10
- Fix · CNA Dell Edge Gateway 3200 (Dell) Fixed in v1.03.10
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Dell Edge Gateway 3200 — dell.com/support/kbdoc/en-us/000214917/dsa-2023-225-securit…
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2023-15749 Out-of-bounds write in Dell Edge Gateway 3200Priority LOW 27
Timeline
- 2026-10-02 Threatist record created from CVE-2023-32471
- 2026-10-03 Alias added: GHSA-f6fw-cqcj-3c9q
References
More Dell Edge Gateway 3200 Firmware vulnerabilities
- TI-2023-15755 Out-of-bounds write in Dell PowerSwitch Z9664F-ON BIOS CVSS 3.1HIGH 8.2
- TI-2023-15750 Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write… CVSS 3.1HIGH 8.2
- TI-2024-31580 Improper input validation in Dell Client Platform BIOS CVSS 3.1HIGH 7.5
- TI-2023-15749 Out-of-bounds write in Dell Edge Gateway 3200 CVSS 3.1MEDIUM 5.7
Sources
- CVE-2023-32471 · CVE Program
- CVE-2023-32471 · NVD
- FIRST EPSS
- GHSA-f6fw-cqcj-3c9q · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences