CVE-2024-0161

HIGH

7.2

Beschreibung

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.

CVE Details

CVSS v3.1 Bewertung7.2

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H

AngriffsvektorLOCAL

KomplexitatHIGH

Erforderliche PrivilegienHIGH

BenutzerinteraktionNONE

Veroffentlicht3/13/2024

Zuletzt geandert2/4/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

dell:dss_8440dell:dss_8440_firmwaredell:emc_storage_nx3240dell:emc_storage_nx3240_firmwaredell:emc_storage_nx3340dell:emc_storage_nx3340_firmwaredell:emc_xc_core_6420dell:emc_xc_core_6420_firmwaredell:emc_xc_core_xc450dell:emc_xc_core_xc450_firmwaredell:emc_xc_core_xc640dell:emc_xc_core_xc640_firmwaredell:emc_xc_core_xc650dell:emc_xc_core_xc650_firmwaredell:emc_xc_core_xc6520dell:emc_xc_core_xc6520_firmwaredell:emc_xc_core_xc740xddell:emc_xc_core_xc740xd2dell:emc_xc_core_xc740xd2_firmwaredell:emc_xc_core_xc740xd_firmwaredell:emc_xc_core_xc750dell:emc_xc_core_xc750_firmwaredell:emc_xc_core_xc750xadell:emc_xc_core_xc750xa_firmwaredell:emc_xc_core_xc940dell:emc_xc_core_xc940_firmwaredell:emc_xc_core_xcxr2dell:emc_xc_core_xcxr2_firmwaredell:poweredge_c4130dell:poweredge_c4130_firmwaredell:poweredge_c4140dell:poweredge_c4140_firmwaredell:poweredge_c6320dell:poweredge_c6320_firmwaredell:poweredge_c6420dell:poweredge_c6420_firmwaredell:poweredge_c6520dell:poweredge_c6520_firmwaredell:poweredge_fc430dell:poweredge_fc430_firmwaredell:poweredge_fc630dell:poweredge_fc630_firmwaredell:poweredge_fc640dell:poweredge_fc640_firmwaredell:poweredge_fc830dell:poweredge_fc830_firmwaredell:poweredge_m630dell:poweredge_m630_\(pe_vrtx\)dell:poweredge_m630_\(pe_vrtx\)_firmwaredell:poweredge_m630_firmwaredell:poweredge_m640dell:poweredge_m640_\(pe_vrtx\)dell:poweredge_m640_\(pe_vrtx\)_firmwaredell:poweredge_m640_firmwaredell:poweredge_m830dell:poweredge_m830_\(pe_vrtx\)dell:poweredge_m830_\(pe_vrtx\)_firmwaredell:poweredge_m830_firmwaredell:poweredge_mx740cdell:poweredge_mx740c_firmwaredell:poweredge_mx750cdell:poweredge_mx750c_firmwaredell:poweredge_mx840cdell:poweredge_mx840c_firmwaredell:poweredge_r230dell:poweredge_r230_firmwaredell:poweredge_r250dell:poweredge_r250_firmwaredell:poweredge_r330dell:poweredge_r330_firmwaredell:poweredge_r350dell:poweredge_r350_firmwaredell:poweredge_r360dell:poweredge_r360_firmwaredell:poweredge_r430dell:poweredge_r430_firmwaredell:poweredge_r440dell:poweredge_r440_firmwaredell:poweredge_r450dell:poweredge_r450_firmwaredell:poweredge_r530dell:poweredge_r530_firmwaredell:poweredge_r540dell:poweredge_r540_firmwaredell:poweredge_r550dell:poweredge_r550_firmwaredell:poweredge_r630dell:poweredge_r630_firmwaredell:poweredge_r640dell:poweredge_r640_firmwaredell:poweredge_r650dell:poweredge_r650_firmwaredell:poweredge_r650xsdell:poweredge_r650xs_firmwaredell:poweredge_r730dell:poweredge_r730_firmwaredell:poweredge_r730xddell:poweredge_r730xd_firmwaredell:poweredge_r740dell:poweredge_r740_firmwaredell:poweredge_r740xddell:poweredge_r740xd2dell:poweredge_r740xd2_firmwaredell:poweredge_r740xd_firmwaredell:poweredge_r750dell:poweredge_r750_firmwaredell:poweredge_r750xadell:poweredge_r750xa_firmwaredell:poweredge_r750xsdell:poweredge_r750xs_firmwaredell:poweredge_r830dell:poweredge_r830_firmwaredell:poweredge_r840dell:poweredge_r840_firmwaredell:poweredge_r930dell:poweredge_r930_firmwaredell:poweredge_r940dell:poweredge_r940_firmwaredell:poweredge_r940xadell:poweredge_r940xa_firmwaredell:poweredge_t130dell:poweredge_t130_firmwaredell:poweredge_t150dell:poweredge_t150_firmwaredell:poweredge_t330dell:poweredge_t330_firmwaredell:poweredge_t350dell:poweredge_t350_firmwaredell:poweredge_t360dell:poweredge_t360_firmwaredell:poweredge_t430dell:poweredge_t430_firmwaredell:poweredge_t440dell:poweredge_t440_firmwaredell:poweredge_t550dell:poweredge_t550_firmwaredell:poweredge_t630dell:poweredge_t630_firmwaredell:poweredge_t640dell:poweredge_t640_firmwaredell:poweredge_xe2420dell:poweredge_xe2420_firmwaredell:poweredge_xe7420dell:poweredge_xe7420_firmwaredell:poweredge_xe7440dell:poweredge_xe7440_firmwaredell:poweredge_xr11dell:poweredge_xr11_firmwaredell:poweredge_xr12dell:poweredge_xr12_firmwaredell:poweredge_xr2dell:poweredge_xr2_firmwaredell:poweredge_xr4510cdell:poweredge_xr4510c_firmwaredell:poweredge_xr4520cdell:poweredge_xr4520c_firmwaredell:storage_nx3230dell:storage_nx3230_firmwaredell:storage_nx3330dell:storage_nx3330_firmwaredell:storage_nx430dell:storage_nx430_firmwaredell:xc430dell:xc430_firmwaredell:xc630dell:xc630_firmwaredell:xc6320dell:xc6320_firmwaredell:xc730dell:xc730_firmwaredell:xc730xddell:xc730xd_firmware

Schwachen (CWE)

CWE-20

Referenzen

https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability(security_alert@emc.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.