CVEvulnerability

CVE-2024-25942

6.8 MEDIUM Published 2024-03-19 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-03-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
Weaknesses
CWE-20, CWE-787

Description

Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.

Affected configurations

• dell poweredge r730 firmware (< 2.19.0) • dell poweredge r730xd firmware (< 2.19.0) • dell poweredge r630 firmware (< 2.19.0) • dell poweredge c4130 firmware (< 2.19.0) • dell poweredge r930 firmware (< 2.14.0) • dell poweredge m630 firmware (< 2.19.0) • dell poweredge m630 \(pe vrtx\) firmware (< 2.19.0) • dell poweredge fc630 firmware (< 2.19.0) • dell poweredge fc430 firmware (< 2.19.0) • dell poweredge m830 firmware (< 2.19.0) • dell poweredge m830 \(pe vrtx\) firmware (< 2.19.0) • dell poweredge fc830 firmware (< 2.19.0) • dell poweredge t630 firmware (< 2.19.0) • dell poweredge r530 firmware (< 2.19.0) • dell poweredge r430 firmware (< 2.19.0) • dell poweredge t430 firmware (< 2.19.0) • dell poweredge r830 firmware (< 1.19.0) • dell poweredge c6320 firmware (< 2.19.0) • dell nx3230 firmware (< 2.19.0) • dell nx3330 firmware (< 2.19.0) • dell xc6320 firmware (< 2.19.0) • dell xc430 firmware (< 2.19.0) • dell xc630 firmware (< 2.19.0) • dell xc730 firmware (< 2.19.0) • dell xc730xd firmware (< 2.19.0)

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-787 Out-of-bounds Write weakness

References