Dell BIOS Input Validation Error Vulnerability (CNVD-2023-14507)

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell (USA).Dell BIOS is vulnerable to an input validation error. An authenticated local malicious user can execute arbitrary code in SMRAM by using SMI. A remote attacker could exploit the vulnerability by sending a malicious HTTP or HTTPS request to execute arbitrary shell commands with root user privileges.