high7.2
CVE-2024-0161
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability.
Impact
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Poweredge T360 Firmware | before 1.1.1 |
| Dell | Poweredge R360 Firmware | before 1.1.1 |
| Dell | Poweredge R650 Firmware | before 1.13.2 |
| Dell | Poweredge R750 Firmware | before 1.13.2 |
| Dell | Poweredge R750xa Firmware | before 1.13.2 |
| Dell | Poweredge C6520 Firmware | before 1.13.2 |
| Dell | Poweredge Mx750c Firmware | before 1.13.2 |
| Dell | Poweredge R550 Firmware | before 1.13.2 |
| Dell | Poweredge R450 Firmware | before 1.13.2 |
| Dell | Poweredge R650xs Firmware | before 1.13.2 |
| Dell | Poweredge R750xs Firmware | before 1.13.2 |
| Dell | Poweredge T550 Firmware | before 1.13.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability