6.5

CVE-2024-38304

Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Emc Xc Core Xcxr2 Firmware Version < 2.22.1
   Dell ≫ Emc Xc Core Xcxr2 Version -
Dell ≫ Emc Xc Core Xc940 System Firmware Version < 2.22.2
   Dell ≫ Emc Xc Core Xc940 System Version -
Dell ≫ Emc Xc Core Xc740xd2 Firmware Version < 2.22.1
   Dell ≫ Emc Xc Core Xc740xd2 Version -
Dell ≫ Emc Xc Core Xc640 System Firmware Version < 2.22.2
   Dell ≫ Emc Xc Core Xc640 System Version -
Dell ≫ Emc Xc Core 6420 System Firmware Version < 2.22.2
   Dell ≫ Emc Xc Core 6420 System Version -
Dell ≫ Emc Storage Nx3340 Firmware Version < 2.22.2
   Dell ≫ Emc Storage Nx3340 Version -
Dell ≫ Emc Storage Nx3240 Firmware Version < 2.22.2
   Dell ≫ Emc Storage Nx3240 Version -
Dell ≫ Poweredge Xe7440 Firmware Version < 2.22.2
   Dell ≫ Poweredge Xe7440 Version -
Dell ≫ Poweredge Xe7420 Firmware Version < 2.22.2
   Dell ≫ Poweredge Xe7420 Version -
Dell ≫ Poweredge Xe2420 Firmware Version < 2.22.2
   Dell ≫ Poweredge Xe2420 Version -
Dell ≫ Dss 8440 Firmware Version < 2.22.2
   Dell ≫ Dss 8440 Version -
Dell ≫ Poweredge C4140 Firmware Version < 2.22.2
   Dell ≫ Poweredge C4140 Version -
Dell ≫ Poweredge Mx840c Firmware Version < 2.22.1
   Dell ≫ Poweredge Mx840c Version -
Dell ≫ Poweredge Mx740c Firmware Version < 2.22.1
   Dell ≫ Poweredge Mx740c Version -
Dell ≫ Poweredge M640 Firmware Version < 2.22.2
   Dell ≫ Poweredge M640 Version -
Dell ≫ Poweredge Fc640 Firmware Version < 2.22.2
   Dell ≫ Poweredge Fc640 Version -
Dell ≫ Poweredge C6420 Firmware Version < 2.22.2
   Dell ≫ Poweredge C6420 Version -
Dell ≫ Poweredge T640 Firmware Version < 2.22.1
   Dell ≫ Poweredge T640 Version -
Dell ≫ Poweredge R940xa Firmware Version < 2.22.1
   Dell ≫ Poweredge R940xa Version -
Dell ≫ Poweredge R840 Firmware Version < 2.22.1
   Dell ≫ Poweredge R840 Version -
Dell ≫ Poweredge R740xd2 Firmware Version < 2.22.1
   Dell ≫ Poweredge R740xd2 Version -
Dell ≫ Poweredge Xr2 Firmware Version < 2.22.1
   Dell ≫ Poweredge Xr2 Version -
Dell ≫ Poweredge T440 Firmware Version < 2.22.1
   Dell ≫ Poweredge T440 Version -
Dell ≫ Poweredge R440 Firmware Version < 2.22.1
   Dell ≫ Poweredge R440 Version -
Dell ≫ Poweredge R540 Firmware Version < 2.22.1
   Dell ≫ Poweredge R540 Version -
Dell ≫ Poweredge R940 Firmware Version < 2.22.2
   Dell ≫ Poweredge R940 Version -
Dell ≫ Poweredge R640 Firmware Version < 2.22.2
   Dell ≫ Poweredge R640 Version -
Dell ≫ Poweredge R740xd Firmware Version < 2.22.2
   Dell ≫ Poweredge R740xd Version -
Dell ≫ Poweredge R740 Firmware Version < 2.22.2
   Dell ≫ Poweredge R740 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.045
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2 4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EMC 3.8 2 1.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CWE-788 Access of Memory Location After End of Buffer

The product reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.

https://www.dell.com/support/kbdoc/en-us/000228137/dsa-2024-310-security-update-for-dell-poweredge-server-for-access-of-memory-location-after-end-of-buffer-vulnerability
Vendor Advisory