CVE-2023-25537

Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege.

• dell poweredge r740 firmware (< 2.18.1) • dell poweredge r740xd firmware (< 2.18.1) • dell poweredge r640 firmware (< 2.18.1) • dell poweredge r940 firmware (< 2.18.1) • dell poweredge r540 firmware (< 2.18.1) • dell poweredge r440 firmware (< 2.18.1) • dell poweredge t440 firmware (< 2.18.1) • dell poweredge xr2 firmware (< 2.18.1) • dell poweredge r740xd2 firmware (< 2.18.1) • dell poweredge r840 firmware (< 2.18.1) • dell poweredge r940xa firmware (< 2.18.1) • dell poweredge t640 firmware (< 2.18.1) • dell poweredge c6420 firmware (< 2.18.1) • dell poweredge fc640 firmware (< 2.18.1) • dell poweredge m640 firmware (< 2.18.1) • dell poweredge mx740c firmware (< 2.18.1) • dell poweredge mx840c firmware (< 2.18.1) • dell poweredge c4140 firmware (< 2.18.1) • dell dss 8440 firmware (< 2.18.1) • dell poweredge xe2420 firmware (< 2.18.1) • dell poweredge xe7420 firmware (< 2.18.1) • dell poweredge xe7440 firmware (< 2.18.1) • dell emc storage nx3240 firmware (< 2.18.1) • dell emc storage nx3340 firmware (< 2.18.1) • dell emc xc core 6420 firmware (< 2.18.1) • dell emc xc core xc640 firmware (< 2.18.1) • dell emc xc core xc740xd firmware (< 2.18.1) • dell emc xc core xc740xd2 firmware (< 2.18.1) • dell emc xc core xc940 firmware (< 2.18.1) • dell emc xc core xcxr2 firmware (< 2.18.1)