GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

FKIE_CVE-2013-3582

Vulnerability from fkie_nvd - Published: 2013-08-28 13:13 - Updated: 2026-06-16 23:55
Severity
Summary
Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbu_packet.pktNum value in conjunction with a crafted rbu_packet.pktSize value.
References
cret@cert.orghttp://www.kb.cert.org/vuls/id/912156US Government Resource
cret@cert.orghttp://www.kb.cert.org/vuls/id/BLUU-99HSLAUS Government Resource
cret@cert.orghttps://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdfExploit
cret@cert.orghttps://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdfExploit
cret@cert.orghttps://www.blackhat.com/us-13/archives.html#Butterworth
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/912156US Government Resource
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/BLUU-99HSLAUS Government Resource
af854a3a-2127-422b-91ae-364da2661108https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdfExploit
af854a3a-2127-422b-91ae-364da2661108https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdfExploit
af854a3a-2127-422b-91ae-364da2661108https://www.blackhat.com/us-13/archives.html#Butterworth
Impacted products
Vendor Product Version
dell latitude_d530 -
dell latitude_d531 -
dell latitude_d630 -
dell latitude_d631 -
dell latitude_d830 -
dell latitude_e4200 -
dell latitude_e4300 -
dell latitude_e5400 -
dell latitude_e5500 -
dell latitude_e6400 -
dell latitude_e6400_atg -
dell latitude_e6400_atg_xfr -
dell latitude_e6500 -
dell latitude_xt2 -
dell latitude_z600 -
dell precision_m2300 -
dell precision_m2400 -
dell precision_m4300 -
dell precision_m4400 -
dell precision_m6300 -
dell precision_m6400 -
dell precision_m6500 -
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cret@cert.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:latitude_d530:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB5C16C0-81B4-4016-BD77-4999FCD398D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_d531:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5E70DF04-5788-41CC-8210-215E9502E952",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_d630:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "77B66C84-F140-478A-A225-14F981DE78ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_d631:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "93EA884E-5901-434C-AABF-2AAB7DAE3235",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_d830:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "643F1338-4576-4FAE-B141-C911F8D30650",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_e4200:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "48131E6D-8B18-4393-89D9-4EA862C3EE48",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_e4300:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "933BD7AE-9837-4CC0-8651-DCB896285754",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_e5400:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ACF0BEC-E510-4E8D-9921-4D4FFC01CCA4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_e5500:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DCA6260F-AD48-4587-93A5-133A0191DD97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_e6400:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD24016C-4F29-4C57-84F2-4D0E1248B16C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_e6400_atg:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "77ED6E3A-E73D-4F25-BF61-F799AB6FCF10",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_e6400_atg_xfr:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "93B307D3-9843-4CDB-B493-ED120407EBAC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_e6500:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E125123A-F8C5-406D-AD58-5F2B3E87A11F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_xt2:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CCE7842E-CC66-4654-BA5F-6F8D1F2D73B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:latitude_z600:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6F74764-547C-4A12-9373-D89CC4F3E667",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:precision_m2300:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F97775F-CFD3-419C-9D1A-7C211C526BF5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:precision_m2400:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E0A1390-F232-4A19-BB06-243274BF4FBF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:precision_m4300:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A903EC47-B0D7-416C-801F-21AB88A4DBCE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:precision_m4400:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F18F7B4-28F2-423E-9E78-88D16E0A2687",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:precision_m6300:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "80FF5DA6-D47D-43A8-9BD8-17A3F03B231B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:precision_m6400:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "348FFD7A-19F0-4AE4-9CD5-74A6E0D80A49",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:dell:precision_m6500:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "37272C28-7844-4725-A8CF-8D0E739A57A6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbu_packet.pktNum value in conjunction with a crafted rbu_packet.pktSize value."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer en Dell BIOS en dispositivos Dell Latitude D###, E####, XT2, y dispositivos Z600, y Dell Precision M####, permite a usuarios locales saltarse los requisitos de firma de BIOS e instalar im\u00e1genes de BIOS arbitrarias mediante el aprovechamiento de los privilegios administrativos y proporcionar un valor manipulado rbu_packet.pktNum en conjunto con un valor rbu_packet.pktSize manipulado."
    }
  ],
  "id": "CVE-2013-3582",
  "lastModified": "2026-06-16T23:55:26.270",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.6,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 4.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-08-28T13:13:58.223",
  "references": [
    {
      "source": "cret@cert.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/912156"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/BLUU-99HSLA"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Exploit"
      ],
      "url": "https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdf"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Exploit"
      ],
      "url": "https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdf"
    },
    {
      "source": "cret@cert.org",
      "url": "https://www.blackhat.com/us-13/archives.html#Butterworth"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/912156"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/BLUU-99HSLA"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.blackhat.com/us-13/archives.html#Butterworth"
    }
  ],
  "sourceIdentifier": "cret@cert.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.