CVE-2013-3582 - CVE House
Back to Database
Status published High CVE-2013-3582

Buffer overflow in Dell BIOS on Dell Latitude D###, E####,...

Vulnerability Description

Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbu_packet.pktNum value in conjunction with a crafted rbu_packet.pktSize value.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-3582

Credits & Attribution

No credits recorded in the NVD database.

References

More from dell

View All →
CVE-2019-19620
In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local...
Low 3.3
CVE-2018-1207
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection...
Critical 9.8
CVE-2018-15769
RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in...
High 7.5
CVE-2018-15748
On Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine...
High 8.8
CVE-2017-2802
An exploitable dll hijacking vulnerability exists in the poaService.exe service...
High 7.8

Affected Vendor

Affected Software

latitude d530, latitude d531, latitude d630, latitude d631, latitude d830, latitude e4200, latitude e4300, latitude e5400, latitude e5500, latitude e6400, latitude e6400 atg, latitude e6400 atg xfr, latitude e6500, latitude xt2, latitude z600, precision m2300, precision m2400, precision m4300, precision m4400, precision m6300, precision m6400, precision m6500
Vulnerable Versions:
Unknown

Timeline

Official Publish: August 28th, 2013
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.