6

CVE-2024-22453

Dell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high privileged attacker could potentially exploit this vulnerability to write to otherwise unauthorized memory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Poweredge R730 Firmware Version < 2.19.0
   Dell ≫ Poweredge R730 Version -
Dell ≫ Poweredge R730xd Firmware Version < 2.19.0
   Dell ≫ Poweredge R730xd Version -
Dell ≫ Poweredge R630 Firmware Version < 2.19.0
   Dell ≫ Poweredge R630 Version -
Dell ≫ Poweredge C4130 Firmware Version < 2.19.0
   Dell ≫ Poweredge C4130 Version -
Dell ≫ Poweredge R930 Firmware Version < 2.14.0
   Dell ≫ Poweredge R930 Version -
Dell ≫ Poweredge M630 Firmware Version < 2.19.0
   Dell ≫ Poweredge M630 Version -
Dell ≫ Poweredge M630 (pe Vrtx) Firmware Version < 2.19.0
   Dell ≫ Poweredge M630 (pe Vrtx) Version -
Dell ≫ Poweredge Fc630 Firmware Version < 2.19.0
   Dell ≫ Poweredge Fc630 Version -
Dell ≫ Poweredge Fc430 Firmware Version < 2.19.0
   Dell ≫ Poweredge Fc430 Version -
Dell ≫ Poweredge M830 Firmware Version < 2.19.0
   Dell ≫ Poweredge M830 Version -
Dell ≫ Poweredge M830 (pe Vrtx) Firmware Version < 2.19.0
   Dell ≫ Poweredge M830 (pe Vrtx) Version -
Dell ≫ Poweredge Fc830 Firmware Version < 2.19.0
   Dell ≫ Poweredge Fc830 Version -
Dell ≫ Poweredge T630 Firmware Version < 2.19.0
   Dell ≫ Poweredge T630 Version -
Dell ≫ Poweredge R530 Firmware Version < 2.19.0
   Dell ≫ Poweredge R530 Version -
Dell ≫ Poweredge R430 Firmware Version < 2.19.0
   Dell ≫ Poweredge R430 Version -
Dell ≫ Poweredge T430 Firmware Version < 2.19.0
   Dell ≫ Poweredge T430 Version -
Dell ≫ Poweredge R830 Firmware Version < 1.19.0
   Dell ≫ Poweredge R830 Version -
Dell ≫ Poweredge C6320 Firmware Version < 2.19.0
   Dell ≫ Poweredge C6320 Version -
Dell ≫ Nx3230 Firmware Version < 2.19.0
   Dell ≫ Nx3230 Version -
Dell ≫ Nx3330 Firmware Version < 2.19.0
   Dell ≫ Nx3330 Version -
Dell ≫ Xc6320 Firmware Version < 2.19.0
   Dell ≫ Xc6320 Version -
Dell ≫ Xc430 Firmware Version < 2.19.0
   Dell ≫ Xc430 Version -
Dell ≫ Xc630 Firmware Version < 2.19.0
   Dell ≫ Xc630 Version -
Dell ≫ Xc730 Firmware Version < 2.19.0
   Dell ≫ Xc730 Version -
Dell ≫ Xc730xd Firmware Version < 2.19.0
   Dell ≫ Xc730xd Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.084
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6 0.8 5.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
EMC 7.2 0.8 5.8
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H
CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.dell.com/support/kbdoc/en-us/000223209/dsa-2024-105-security-update-for-dell-poweredge-server-bios-for-a-heap-based-buffer-overflow-vulnerability
Vendor Advisory