low3.8
CVE-2024-38304
Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability.
Impact
Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Emc Xc Core Xcxr2 Firmware | before 2.22.1 |
| Dell | Emc Xc Core Xc940 System Firmware | before 2.22.2 |
| Dell | Emc Xc Core Xc740xd2 Firmware | before 2.22.1 |
| Dell | Emc Xc Core Xc740xd System Firmware | before 2.22.2 |
| Dell | Emc Xc Core Xc640 System Firmware | before 2.22.2 |
| Dell | Emc Xc Core 6420 System Firmware | before 2.22.2 |
| Dell | Emc Storage Nx3340 Firmware | before 2.22.2 |
| Dell | Emc Storage Nx3240 Firmware | before 2.22.2 |
| Dell | Poweredge Xe7440 Firmware | before 2.22.2 |
| Dell | Poweredge Xe7420 Firmware | before 2.22.2 |
| Dell | Poweredge Xe2420 Firmware | before 2.22.2 |
| Dell | Dss 8440 Firmware | before 2.22.2 |