CVE-2024-38304

Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

• dell emc xc core xcxr2 firmware (< 2.22.1) • dell emc xc core xc940 system firmware (< 2.22.2) • dell emc xc core xc740xd2 firmware (< 2.22.1) • dell emc xc core xc740xd system firmware (< 2.22.2) • dell emc xc core xc640 system firmware (< 2.22.2) • dell emc xc core 6420 system firmware (< 2.22.2) • dell emc storage nx3340 firmware (< 2.22.2) • dell emc storage nx3240 firmware (< 2.22.2) • dell poweredge xe7440 firmware (< 2.22.2) • dell poweredge xe7420 firmware (< 2.22.2) • dell poweredge xe2420 firmware (< 2.22.2) • dell dss 8440 firmware (< 2.22.2) • dell poweredge c4140 firmware (< 2.22.2) • dell poweredge mx840c firmware (< 2.22.1) • dell poweredge mx740c firmware (< 2.22.1) • dell poweredge m640 \(for pe vrtx\) firmware (< 2.22.2) • dell poweredge m640 firmware (< 2.22.2) • dell poweredge fc640 firmware (< 2.22.2) • dell poweredge c6420 firmware (< 2.22.2) • dell poweredge t640 firmware (< 2.22.1) • dell poweredge r940xa firmware (< 2.22.1) • dell poweredge r840 firmware (< 2.22.1) • dell poweredge r740xd2 firmware (< 2.22.1) • dell poweredge xr2 firmware (< 2.22.1) • dell poweredge t440 firmware (< 2.22.1) • dell poweredge r440 firmware (< 2.22.1) • dell poweredge r540 firmware (< 2.22.1) • dell poweredge r940 firmware (< 2.22.2) • dell poweredge r640 firmware (< 2.22.2) • dell poweredge r740xd firmware (< 2.22.2) • dell poweredge r740 firmware (< 2.22.2)