CVE-2023-30630

CVE-2023-30630 affects nongnu dmidecode versions prior to 3.5, allowing a local attacker to overwrite or create arbitrary local files using the -dump-bin option. This vulnerability carries a CVSS score of 7.1 (High) due to its low attack complexity and the potential for high impact on confidentiality and availability, particularly through plausible sudo execution leading to unauthorized privilege escalation. While the vendor's fix in version 3.5 aims to prevent overwriting existing files, concerns remain regarding other attack vectors like creating new malicious files. Currently, there is no known active exploitation, public exploit code, or significant community discussion surrounding this CVE.