CVE-2024-0154

LOW

3.8

Descripcion

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.

Detalles CVE

Puntuacion CVSS v3.13.8

SeveridadLOW

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioNONE

Publicado3/13/2024

Ultima modificacion1/31/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

dell:dss_8440dell:dss_8440_firmwaredell:emc_xc_core_6420_systemdell:emc_xc_core_6420_system_firmwaredell:emc_xc_core_xc450dell:emc_xc_core_xc450_firmwaredell:emc_xc_core_xc640_systemdell:emc_xc_core_xc640_system_firmwaredell:emc_xc_core_xc650dell:emc_xc_core_xc650_firmwaredell:emc_xc_core_xc6520dell:emc_xc_core_xc6520_firmwaredell:emc_xc_core_xc740xd2dell:emc_xc_core_xc740xd2_firmwaredell:emc_xc_core_xc740xd_systemdell:emc_xc_core_xc740xd_system_firmwaredell:emc_xc_core_xc750dell:emc_xc_core_xc750_firmwaredell:emc_xc_core_xc750xadell:emc_xc_core_xc750xa_firmwaredell:emc_xc_core_xc7525dell:emc_xc_core_xc7525_firmwaredell:emc_xc_core_xc940_systemdell:emc_xc_core_xc940_system_firmwaredell:emc_xc_core_xcxr2dell:emc_xc_core_xcxr2_firmwaredell:nx3230dell:nx3230_firmwaredell:nx3240dell:nx3240_firmwaredell:nx3330dell:nx3330_firmwaredell:nx3340dell:nx3340_firmwaredell:nx430dell:nx430_firmwaredell:nx440dell:nx440_firmwaredell:poweredge_c4130dell:poweredge_c4130_firmwaredell:poweredge_c4140dell:poweredge_c4140_firmwaredell:poweredge_c6320dell:poweredge_c6320_firmwaredell:poweredge_c6420dell:poweredge_c6420_firmwaredell:poweredge_c6520dell:poweredge_c6520_firmwaredell:poweredge_c6525dell:poweredge_c6525_firmwaredell:poweredge_c6615dell:poweredge_c6615_firmwaredell:poweredge_c6620dell:poweredge_c6620_firmwaredell:poweredge_fc430dell:poweredge_fc430_firmwaredell:poweredge_fc630dell:poweredge_fc630_firmwaredell:poweredge_fc640dell:poweredge_fc640_firmwaredell:poweredge_fc830dell:poweredge_fc830_firmwaredell:poweredge_hs5610dell:poweredge_hs5610_firmwaredell:poweredge_hs5620dell:poweredge_hs5620_firmwaredell:poweredge_m630dell:poweredge_m630_\(pe_vrtx\)dell:poweredge_m630_\(pe_vrtx\)_firmwaredell:poweredge_m630_firmwaredell:poweredge_m640dell:poweredge_m640_\(pe_vrtx\)dell:poweredge_m640_\(pe_vrtx\)_firmwaredell:poweredge_m640_firmwaredell:poweredge_m830dell:poweredge_m830_\(pe_vrtx\)dell:poweredge_m830_\(pe_vrtx\)_firmwaredell:poweredge_m830_firmwaredell:poweredge_mx740cdell:poweredge_mx740c_firmwaredell:poweredge_mx750cdell:poweredge_mx750c_firmwaredell:poweredge_mx760cdell:poweredge_mx760c_firmwaredell:poweredge_mx840cdell:poweredge_mx840c_firmwaredell:poweredge_r230dell:poweredge_r230_firmwaredell:poweredge_r240dell:poweredge_r240_firmwaredell:poweredge_r250dell:poweredge_r250_firmwaredell:poweredge_r330dell:poweredge_r330_firmwaredell:poweredge_r340dell:poweredge_r340_firmwaredell:poweredge_r350dell:poweredge_r350_firmwaredell:poweredge_r430dell:poweredge_r430_firmwaredell:poweredge_r440dell:poweredge_r440_firmwaredell:poweredge_r450dell:poweredge_r450_firmwaredell:poweredge_r530dell:poweredge_r530_firmwaredell:poweredge_r540dell:poweredge_r540_firmwaredell:poweredge_r550dell:poweredge_r550_firmwaredell:poweredge_r630dell:poweredge_r630_firmwaredell:poweredge_r640dell:poweredge_r640_firmwaredell:poweredge_r650dell:poweredge_r650_firmwaredell:poweredge_r650xsdell:poweredge_r650xs_firmwaredell:poweredge_r6515dell:poweredge_r6515_firmwaredell:poweredge_r6525dell:poweredge_r6525_firmwaredell:poweredge_r660dell:poweredge_r660_firmwaredell:poweredge_r660xsdell:poweredge_r660xs_firmwaredell:poweredge_r6615dell:poweredge_r6615_firmwaredell:poweredge_r6625dell:poweredge_r6625_firmwaredell:poweredge_r730dell:poweredge_r730_firmwaredell:poweredge_r730xddell:poweredge_r730xd_firmwaredell:poweredge_r740dell:poweredge_r740_firmwaredell:poweredge_r740xddell:poweredge_r740xd2dell:poweredge_r740xd2_firmwaredell:poweredge_r740xd_firmwaredell:poweredge_r750dell:poweredge_r750_firmwaredell:poweredge_r750xadell:poweredge_r750xa_firmwaredell:poweredge_r750xsdell:poweredge_r750xs_firmwaredell:poweredge_r7515dell:poweredge_r7515_firmwaredell:poweredge_r7525dell:poweredge_r7525_firmwaredell:poweredge_r760dell:poweredge_r760_firmwaredell:poweredge_r760xadell:poweredge_r760xa_firmwaredell:poweredge_r760xd2dell:poweredge_r760xd2_firmwaredell:poweredge_r760xsdell:poweredge_r760xs_firmwaredell:poweredge_r7615dell:poweredge_r7615_firmwaredell:poweredge_r7625dell:poweredge_r7625_firmwaredell:poweredge_r830dell:poweredge_r830_firmwaredell:poweredge_r840dell:poweredge_r840_firmwaredell:poweredge_r860dell:poweredge_r860_firmwaredell:poweredge_r930dell:poweredge_r930_firmwaredell:poweredge_r940dell:poweredge_r940_firmwaredell:poweredge_r940xadell:poweredge_r940xa_firmwaredell:poweredge_r960dell:poweredge_r960_firmwaredell:poweredge_t130dell:poweredge_t130_firmwaredell:poweredge_t140dell:poweredge_t140_firmwaredell:poweredge_t150dell:poweredge_t150_firmwaredell:poweredge_t330dell:poweredge_t330_firmwaredell:poweredge_t340dell:poweredge_t340_firmwaredell:poweredge_t350dell:poweredge_t350_firmwaredell:poweredge_t430dell:poweredge_t430_firmwaredell:poweredge_t440dell:poweredge_t440_firmwaredell:poweredge_t550dell:poweredge_t550_firmwaredell:poweredge_t560dell:poweredge_t560_firmwaredell:poweredge_t630dell:poweredge_t630_firmwaredell:poweredge_t640dell:poweredge_t640_firmwaredell:poweredge_xe2420dell:poweredge_xe2420_firmwaredell:poweredge_xe7420dell:poweredge_xe7420_firmwaredell:poweredge_xe7440dell:poweredge_xe7440_firmwaredell:poweredge_xe8545dell:poweredge_xe8545_firmwaredell:poweredge_xe8640dell:poweredge_xe8640_firmwaredell:poweredge_xe9640dell:poweredge_xe9640_firmwaredell:poweredge_xe9680dell:poweredge_xe9680_firmwaredell:poweredge_xr11dell:poweredge_xr11_firmwaredell:poweredge_xr12dell:poweredge_xr12_firmwaredell:poweredge_xr2dell:poweredge_xr2_firmwaredell:poweredge_xr4510cdell:poweredge_xr4510c_firmwaredell:poweredge_xr4520cdell:poweredge_xr4520c_firmwaredell:poweredge_xr5610dell:poweredge_xr5610_firmwaredell:poweredge_xr7620dell:poweredge_xr7620_firmwaredell:poweredge_xr8610tdell:poweredge_xr8610t_firmwaredell:poweredge_xr8620tdell:poweredge_xr8620t_firmwaredell:xc430dell:xc430_firmwaredell:xc630dell:xc630_firmwaredell:xc6320dell:xc6320_firmwaredell:xc730dell:xc730_firmwaredell:xc730xddell:xc730xd_firmwaredell:xc_core_xc660dell:xc_core_xc660_firmwaredell:xc_core_xc760dell:xc_core_xc760_firmwaredell:xc_core_xc7625dell:xc_core_xc7625_firmware

Debilidades (CWE)

CWE-788CWE-125

Referencias

https://www.dell.com/support/kbdoc/en-us/000222898/dsa-2024-034-security-update-for-dell-poweredge-server-bios-for-an-improper-parameter-initialization-vulnerability(security_alert@emc.com)

https://www.dell.com/support/kbdoc/en-us/000222898/dsa-2024-034-security-update-for-dell-poweredge-server-bios-for-an-improper-parameter-initialization-vulnerability(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.