medium4.4
CVE-2024-25942
Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability.
Impact
Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Poweredge R730 Firmware | before 2.19.0 |
| Dell | Poweredge R730xd Firmware | before 2.19.0 |
| Dell | Poweredge R630 Firmware | before 2.19.0 |
| Dell | Poweredge C4130 Firmware | before 2.19.0 |
| Dell | Poweredge R930 Firmware | before 2.14.0 |
| Dell | Poweredge M630 Firmware | before 2.19.0 |
| Dell | Poweredge M630 \(Pe Vrtx\) Firmware | before 2.19.0 |
| Dell | Poweredge Fc630 Firmware | before 2.19.0 |
| Dell | Poweredge Fc430 Firmware | before 2.19.0 |
| Dell | Poweredge M830 Firmware | before 2.19.0 |
| Dell | Poweredge M830 \(Pe Vrtx\) Firmware | before 2.19.0 |
| Dell | Poweredge Fc830 Firmware | before 2.19.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000223210/dsa-2024-104-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000223210/dsa-2024-104-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability