CVEvulnerability

CVE-2024-22453

6.0 MEDIUM Published 2024-03-19 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-03-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-122, CWE-787

Description

Dell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high privileged attacker could potentially exploit this vulnerability to write to otherwise unauthorized memory.

Affected configurations

• dell poweredge r730 firmware (< 2.19.0) • dell poweredge r730xd firmware (< 2.19.0) • dell poweredge r630 firmware (< 2.19.0) • dell poweredge c4130 firmware (< 2.19.0) • dell poweredge r930 firmware (< 2.14.0) • dell poweredge m630 firmware (< 2.19.0) • dell poweredge m630 \(pe vrtx\) firmware (< 2.19.0) • dell poweredge fc630 firmware (< 2.19.0) • dell poweredge fc430 firmware (< 2.19.0) • dell poweredge m830 firmware (< 2.19.0) • dell poweredge m830 \(pe vrtx\) firmware (< 2.19.0) • dell poweredge fc830 firmware (< 2.19.0) • dell poweredge t630 firmware (< 2.19.0) • dell poweredge r530 firmware (< 2.19.0) • dell poweredge r430 firmware (< 2.19.0) • dell poweredge t430 firmware (< 2.19.0) • dell poweredge r830 firmware (< 1.19.0) • dell poweredge c6320 firmware (< 2.19.0) • dell nx3230 firmware (< 2.19.0) • dell nx3330 firmware (< 2.19.0) • dell xc6320 firmware (< 2.19.0) • dell xc430 firmware (< 2.19.0) • dell xc630 firmware (< 2.19.0) • dell xc730 firmware (< 2.19.0) • dell xc730xd firmware (< 2.19.0)

Related

Weakness · CWE (2)

  • CWE-122 Heap-based Buffer Overflow weakness
  • CWE-787 Out-of-bounds Write weakness

References