7.2

CVE-2024-22453

Dell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high privileged attacker could potentially exploit this vulnerability to write to otherwise unauthorized memory.

Data is provided by the National Vulnerability Database (NVD)
Dell ≫ Poweredge R730 Firmware Version < 2.19.0
   Dell ≫ Poweredge R730 Version-
Dell ≫ Poweredge R730xd Firmware Version < 2.19.0
   Dell ≫ Poweredge R730xd Version-
Dell ≫ Poweredge R630 Firmware Version < 2.19.0
   Dell ≫ Poweredge R630 Version-
Dell ≫ Poweredge C4130 Firmware Version < 2.19.0
   Dell ≫ Poweredge C4130 Version-
Dell ≫ Poweredge R930 Firmware Version < 2.14.0
   Dell ≫ Poweredge R930 Version-
Dell ≫ Poweredge M630 Firmware Version < 2.19.0
   Dell ≫ Poweredge M630 Version-
Dell ≫ Poweredge M630 (pe Vrtx) Firmware Version < 2.19.0
   Dell ≫ Poweredge M630 (pe Vrtx) Version-
Dell ≫ Poweredge Fc630 Firmware Version < 2.19.0
   Dell ≫ Poweredge Fc630 Version-
Dell ≫ Poweredge Fc430 Firmware Version < 2.19.0
   Dell ≫ Poweredge Fc430 Version-
Dell ≫ Poweredge M830 Firmware Version < 2.19.0
   Dell ≫ Poweredge M830 Version-
Dell ≫ Poweredge M830 (pe Vrtx) Firmware Version < 2.19.0
   Dell ≫ Poweredge M830 (pe Vrtx) Version-
Dell ≫ Poweredge Fc830 Firmware Version < 2.19.0
   Dell ≫ Poweredge Fc830 Version-
Dell ≫ Poweredge T630 Firmware Version < 2.19.0
   Dell ≫ Poweredge T630 Version-
Dell ≫ Poweredge R530 Firmware Version < 2.19.0
   Dell ≫ Poweredge R530 Version-
Dell ≫ Poweredge R430 Firmware Version < 2.19.0
   Dell ≫ Poweredge R430 Version-
Dell ≫ Poweredge T430 Firmware Version < 2.19.0
   Dell ≫ Poweredge T430 Version-
Dell ≫ Poweredge R830 Firmware Version < 1.19.0
   Dell ≫ Poweredge R830 Version-
Dell ≫ Poweredge C6320 Firmware Version < 2.19.0
   Dell ≫ Poweredge C6320 Version-
Dell ≫ Nx3230 Firmware Version < 2.19.0
   Dell ≫ Nx3230 Version-
Dell ≫ Nx3330 Firmware Version < 2.19.0
   Dell ≫ Nx3330 Version-
Dell ≫ Xc6320 Firmware Version < 2.19.0
   Dell ≫ Xc6320 Version-
Dell ≫ Xc430 Firmware Version < 2.19.0
   Dell ≫ Xc430 Version-
Dell ≫ Xc630 Firmware Version < 2.19.0
   Dell ≫ Xc630 Version-
Dell ≫ Xc730 Firmware Version < 2.19.0
   Dell ≫ Xc730 Version-
Dell ≫ Xc730xd Firmware Version < 2.19.0
   Dell ≫ Xc730xd Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.055
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6 0.8 5.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
security_alert@emc.com 7.2 0.8 5.8
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H
CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.