8.4

CVE-2024-0161

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Poweredge T360 Firmware Version < 1.1.1
   Dell ≫ Poweredge T360 Version -
Dell ≫ Poweredge R360 Firmware Version < 1.1.1
   Dell ≫ Poweredge R360 Version -
Dell ≫ Poweredge R650 Firmware Version < 1.13.2
   Dell ≫ Poweredge R650 Version -
Dell ≫ Poweredge R750 Firmware Version < 1.13.2
   Dell ≫ Poweredge R750 Version -
Dell ≫ Poweredge R750xa Firmware Version < 1.13.2
   Dell ≫ Poweredge R750xa Version -
Dell ≫ Poweredge C6520 Firmware Version < 1.13.2
   Dell ≫ Poweredge C6520 Version -
Dell ≫ Poweredge Mx750c Firmware Version < 1.13.2
   Dell ≫ Poweredge Mx750c Version -
Dell ≫ Poweredge R550 Firmware Version < 1.13.2
   Dell ≫ Poweredge R550 Version -
Dell ≫ Poweredge R450 Firmware Version < 1.13.2
   Dell ≫ Poweredge R450 Version -
Dell ≫ Poweredge R650xs Firmware Version < 1.13.2
   Dell ≫ Poweredge R650xs Version -
Dell ≫ Poweredge R750xs Firmware Version < 1.13.2
   Dell ≫ Poweredge R750xs Version -
Dell ≫ Poweredge T550 Firmware Version < 1.13.2
   Dell ≫ Poweredge T550 Version -
Dell ≫ Poweredge Xr11 Firmware Version < 1.13.2
   Dell ≫ Poweredge Xr11 Version -
Dell ≫ Poweredge Xr12 Firmware Version < 1.13.2
   Dell ≫ Poweredge Xr12 Version -
Dell ≫ Poweredge Xr4510c Firmware Version < 1.14.1
   Dell ≫ Poweredge Xr4510c Version -
Dell ≫ Poweredge Xr4520c Firmware Version < 1.14.1
   Dell ≫ Poweredge Xr4520c Version -
Dell ≫ Poweredge T150 Firmware Version < 1.9.1
   Dell ≫ Poweredge T150 Version -
Dell ≫ Poweredge T350 Firmware Version < 1.9.1
   Dell ≫ Poweredge T350 Version -
Dell ≫ Poweredge R250 Firmware Version < 1.9.1
   Dell ≫ Poweredge R250 Version -
Dell ≫ Poweredge R350 Firmware Version < 1.9.1
   Dell ≫ Poweredge R350 Version -
Dell ≫ Poweredge R740 Firmware Version < 2.21.2
   Dell ≫ Poweredge R740 Version -
Dell ≫ Poweredge R740xd Firmware Version < 2.21.2
   Dell ≫ Poweredge R740xd Version -
Dell ≫ Poweredge R640 Firmware Version < 2.21.2
   Dell ≫ Poweredge R640 Version -
Dell ≫ Poweredge R940 Firmware Version < 2.21.2
   Dell ≫ Poweredge R940 Version -
Dell ≫ Poweredge R540 Firmware Version < 2.21.1
   Dell ≫ Poweredge R540 Version -
Dell ≫ Poweredge R440 Firmware Version < 2.21.1
   Dell ≫ Poweredge R440 Version -
Dell ≫ Poweredge T440 Firmware Version < 2.21.1
   Dell ≫ Poweredge T440 Version -
Dell ≫ Poweredge Xr2 Firmware Version < 2.21.1
   Dell ≫ Poweredge Xr2 Version -
Dell ≫ Poweredge R740xd2 Firmware Version < 2.21.1
   Dell ≫ Poweredge R740xd2 Version -
Dell ≫ Poweredge R840 Firmware Version < 2.21.0
   Dell ≫ Poweredge R840 Version -
Dell ≫ Poweredge R940xa Firmware Version < 2.21.0
   Dell ≫ Poweredge R940xa Version -
Dell ≫ Poweredge T640 Firmware Version < 2.21.0
   Dell ≫ Poweredge T640 Version -
Dell ≫ Poweredge C6420 Firmware Version < 2.21.0
   Dell ≫ Poweredge C6420 Version -
Dell ≫ Poweredge Fc640 Firmware Version < 2.21.0
   Dell ≫ Poweredge Fc640 Version -
Dell ≫ Poweredge M640 Firmware Version < 2.21.0
   Dell ≫ Poweredge M640 Version -
Dell ≫ Poweredge M640 (pe Vrtx) Firmware Version < 2.21.0
   Dell ≫ Poweredge M640 (pe Vrtx) Version -
Dell ≫ Poweredge Mx740c Firmware Version < 2.21.0
   Dell ≫ Poweredge Mx740c Version -
Dell ≫ Poweredge Mx840c Firmware Version < 2.21.0
   Dell ≫ Poweredge Mx840c Version -
Dell ≫ Poweredge C4140 Firmware Version < 2.21.1
   Dell ≫ Poweredge C4140 Version -
Dell ≫ Dss 8440 Firmware Version < 2.21.0
   Dell ≫ Dss 8440 Version -
Dell ≫ Poweredge Xe2420 Firmware Version < 2.21.1
   Dell ≫ Poweredge Xe2420 Version -
Dell ≫ Poweredge Xe7420 Firmware Version < 2.21.0
   Dell ≫ Poweredge Xe7420 Version -
Dell ≫ Poweredge Xe7440 Firmware Version < 2.21.0
   Dell ≫ Poweredge Xe7440 Version -
Dell ≫ Poweredge R730 Firmware Version < 2.19.0
   Dell ≫ Poweredge R730 Version -
Dell ≫ Poweredge R730xd Firmware Version < 2.19.0
   Dell ≫ Poweredge R730xd Version -
Dell ≫ Poweredge R630 Firmware Version < 2.19.0
   Dell ≫ Poweredge R630 Version -
Dell ≫ Poweredge C4130 Firmware Version < 2.19.0
   Dell ≫ Poweredge C4130 Version -
Dell ≫ Poweredge R930 Firmware Version < 2.14.0
   Dell ≫ Poweredge R930 Version -
Dell ≫ Poweredge M630 Firmware Version < 2.19.0
   Dell ≫ Poweredge M630 Version -
Dell ≫ Poweredge M630 (pe Vrtx) Firmware Version < 2.19.0
   Dell ≫ Poweredge M630 (pe Vrtx) Version -
Dell ≫ Poweredge Fc630 Firmware Version < 2.19.0
   Dell ≫ Poweredge Fc630 Version -
Dell ≫ Poweredge Fc430 Firmware Version < 2.19.0
   Dell ≫ Poweredge Fc430 Version -
Dell ≫ Poweredge M830 Firmware Version < 2.19.0
   Dell ≫ Poweredge M830 Version -
Dell ≫ Poweredge M830 (pe Vrtx) Firmware Version < 2.19.0
   Dell ≫ Poweredge M830 (pe Vrtx) Version -
Dell ≫ Poweredge Fc830 Firmware Version < 2.19.0
   Dell ≫ Poweredge Fc830 Version -
Dell ≫ Poweredge T630 Firmware Version < 2.19.0
   Dell ≫ Poweredge T630 Version -
Dell ≫ Poweredge R530 Firmware Version < 2.19.0
   Dell ≫ Poweredge R530 Version -
Dell ≫ Poweredge R430 Firmware Version < 2.19.0
   Dell ≫ Poweredge R430 Version -
Dell ≫ Poweredge T430 Firmware Version < 2.19.0
   Dell ≫ Poweredge T430 Version -
Dell ≫ Poweredge R830 Firmware Version < 1.19.0
   Dell ≫ Poweredge R830 Version -
Dell ≫ Poweredge C6320 Firmware Version < 2.19.0
   Dell ≫ Poweredge C6320 Version -
Dell ≫ Poweredge T130 Firmware Version < 2.20.0
   Dell ≫ Poweredge T130 Version -
Dell ≫ Poweredge R230 Firmware Version < 2.20.0
   Dell ≫ Poweredge R230 Version -
Dell ≫ Poweredge T330 Firmware Version < 2.20.0
   Dell ≫ Poweredge T330 Version -
Dell ≫ Poweredge R330 Firmware Version < 2.20.0
   Dell ≫ Poweredge R330 Version -
Dell ≫ Emc Storage Nx3240 Firmware Version < 2.21.2
   Dell ≫ Emc Storage Nx3240 Version -
Dell ≫ Emc Storage Nx3340 Firmware Version < 2.21.2
   Dell ≫ Emc Storage Nx3340 Version -
Dell ≫ Storage Nx3230 Firmware Version < 2.19.0
   Dell ≫ Storage Nx3230 Version -
Dell ≫ Storage Nx3330 Firmware Version < 2.19.0
   Dell ≫ Storage Nx3330 Version -
Dell ≫ Storage Nx430 Firmware Version < 2.20.0
   Dell ≫ Storage Nx430 Version -
Dell ≫ Emc Xc Core Xc450 Firmware Version < 1.13.2
   Dell ≫ Emc Xc Core Xc450 Version -
Dell ≫ Emc Xc Core Xc650 Firmware Version < 1.13.2
   Dell ≫ Emc Xc Core Xc650 Version -
Dell ≫ Emc Xc Core Xc750 Firmware Version < 1.13.2
   Dell ≫ Emc Xc Core Xc750 Version -
Dell ≫ Emc Xc Core Xc750xa Firmware Version < 1.13.2
   Dell ≫ Emc Xc Core Xc750xa Version -
Dell ≫ Emc Xc Core Xc6520 Firmware Version < 1.13.2
   Dell ≫ Emc Xc Core Xc6520 Version -
Dell ≫ Emc Xc Core 6420 Firmware Version < 2.21.0
   Dell ≫ Emc Xc Core 6420 Version -
Dell ≫ Emc Xc Core Xc640 Firmware Version < 2.21.2
   Dell ≫ Emc Xc Core Xc640 Version -
Dell ≫ Emc Xc Core Xc740xd Firmware Version < 2.21.2
   Dell ≫ Emc Xc Core Xc740xd Version -
Dell ≫ Emc Xc Core Xc740xd2 Firmware Version < 2.21.1
   Dell ≫ Emc Xc Core Xc740xd2 Version -
Dell ≫ Emc Xc Core Xc940 Firmware Version < 2.21.2
   Dell ≫ Emc Xc Core Xc940 Version -
Dell ≫ Emc Xc Core Xcxr2 Firmware Version < 2.21.1
   Dell ≫ Emc Xc Core Xcxr2 Version -
Dell ≫ Xc6320 Firmware Version < 2.19.0
   Dell ≫ Xc6320 Version -
Dell ≫ Xc430 Firmware Version < 2.19.0
   Dell ≫ Xc430 Version -
Dell ≫ Xc630 Firmware Version < 2.19.0
   Dell ≫ Xc630 Version -
Dell ≫ Xc730 Firmware Version < 2.19.0
   Dell ≫ Xc730 Version -
Dell ≫ Xc730xd Firmware Version < 2.19.0
   Dell ≫ Xc730xd Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.103
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.4 2 5.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
EMC 7.2 0.8 5.8
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability
Vendor Advisory