CVE-2024-0161

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.8

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability	Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:dell:poweredge_t360_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_t360:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:dell:poweredge_r360_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r360:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:dell:poweredge_r650_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r650:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:dell:poweredge_r750_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r750:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:dell:poweredge_r750xa_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r750xa:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:dell:poweredge_c6520_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_c6520:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:dell:poweredge_mx750c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_mx750c:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:dell:poweredge_r550_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r550:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND

cpe:2.3:o:dell:poweredge_r450_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r450:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND

cpe:2.3:o:dell:poweredge_r650xs_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r650xs:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND

cpe:2.3:o:dell:poweredge_r750xs_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r750xs:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND

cpe:2.3:o:dell:poweredge_t550_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_t550:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND

cpe:2.3:o:dell:poweredge_xr11_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_xr11:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND

cpe:2.3:o:dell:poweredge_xr12_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_xr12:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND

cpe:2.3:o:dell:poweredge_xr4510c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_xr4510c:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND

cpe:2.3:o:dell:poweredge_xr4520c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_xr4520c:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND

cpe:2.3:o:dell:poweredge_t150_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_t150:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND

cpe:2.3:o:dell:poweredge_t350_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_t350:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND

cpe:2.3:o:dell:poweredge_r250_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r250:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND

cpe:2.3:o:dell:poweredge_r350_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r350:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND

cpe:2.3:o:dell:poweredge_r740_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r740:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND

cpe:2.3:o:dell:poweredge_r740xd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r740xd:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND

cpe:2.3:o:dell:poweredge_r640_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r640:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND

cpe:2.3:o:dell:poweredge_r940_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r940:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND

cpe:2.3:o:dell:poweredge_r540_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r540:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND

cpe:2.3:o:dell:poweredge_r440_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r440:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND

cpe:2.3:o:dell:poweredge_t440_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_t440:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND

cpe:2.3:o:dell:poweredge_xr2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_xr2:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND

cpe:2.3:o:dell:poweredge_r740xd2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r740xd2:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND

cpe:2.3:o:dell:poweredge_r840_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r840:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND

cpe:2.3:o:dell:poweredge_r940xa_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r940xa:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND

cpe:2.3:o:dell:poweredge_t640_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_t640:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND

cpe:2.3:o:dell:poweredge_c6420_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_c6420:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND

cpe:2.3:o:dell:poweredge_fc640_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_fc640:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND

cpe:2.3:o:dell:poweredge_m640_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_m640:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND

cpe:2.3:o:dell:poweredge_m640_\(pe_vrtx\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_m640_\(pe_vrtx\):-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND

cpe:2.3:o:dell:poweredge_mx740c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_mx740c:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND

cpe:2.3:o:dell:poweredge_mx840c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_mx840c:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND

cpe:2.3:o:dell:poweredge_c4140_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_c4140:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND

cpe:2.3:o:dell:dss_8440_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:dss_8440:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND

cpe:2.3:o:dell:poweredge_xe2420_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_xe2420:-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND

cpe:2.3:o:dell:poweredge_xe7420_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_xe7420:-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND

cpe:2.3:o:dell:poweredge_xe7440_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_xe7440:-:*:*:*:*:*:*:*

Configuration 44 (hide)

AND

cpe:2.3:o:dell:poweredge_r730_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r730:-:*:*:*:*:*:*:*

Configuration 45 (hide)

AND

cpe:2.3:o:dell:poweredge_r730xd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r730xd:-:*:*:*:*:*:*:*

Configuration 46 (hide)

AND

cpe:2.3:o:dell:poweredge_r630_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r630:-:*:*:*:*:*:*:*

Configuration 47 (hide)

AND

cpe:2.3:o:dell:poweredge_c4130_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_c4130:-:*:*:*:*:*:*:*

Configuration 48 (hide)

AND

cpe:2.3:o:dell:poweredge_r930_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r930:-:*:*:*:*:*:*:*

Configuration 49 (hide)

AND

cpe:2.3:o:dell:poweredge_m630_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_m630:-:*:*:*:*:*:*:*

Configuration 50 (hide)

AND

cpe:2.3:o:dell:poweredge_m630_\(pe_vrtx\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_m630_\(pe_vrtx\):-:*:*:*:*:*:*:*

Configuration 51 (hide)

AND

cpe:2.3:o:dell:poweredge_fc630_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_fc630:-:*:*:*:*:*:*:*

Configuration 52 (hide)

AND

cpe:2.3:o:dell:poweredge_fc430_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_fc430:-:*:*:*:*:*:*:*

Configuration 53 (hide)

AND

cpe:2.3:o:dell:poweredge_m830_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_m830:-:*:*:*:*:*:*:*

Configuration 54 (hide)

AND

cpe:2.3:o:dell:poweredge_m830_\(pe_vrtx\)_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_m830_\(pe_vrtx\):-:*:*:*:*:*:*:*

Configuration 55 (hide)

AND

cpe:2.3:o:dell:poweredge_fc830_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_fc830:-:*:*:*:*:*:*:*

Configuration 56 (hide)

AND

cpe:2.3:o:dell:poweredge_t630_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_t630:-:*:*:*:*:*:*:*

Configuration 57 (hide)

AND

cpe:2.3:o:dell:poweredge_r530_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r530:-:*:*:*:*:*:*:*

Configuration 58 (hide)

AND

cpe:2.3:o:dell:poweredge_r430_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r430:-:*:*:*:*:*:*:*

Configuration 59 (hide)

AND

cpe:2.3:o:dell:poweredge_t430_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_t430:-:*:*:*:*:*:*:*

Configuration 60 (hide)

AND

cpe:2.3:o:dell:poweredge_r830_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r830:-:*:*:*:*:*:*:*

Configuration 61 (hide)

AND

cpe:2.3:o:dell:poweredge_c6320_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_c6320:-:*:*:*:*:*:*:*

Configuration 62 (hide)

AND

cpe:2.3:o:dell:poweredge_t130_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_t130:-:*:*:*:*:*:*:*

Configuration 63 (hide)

AND

cpe:2.3:o:dell:poweredge_r230_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r230:-:*:*:*:*:*:*:*

Configuration 64 (hide)

AND

cpe:2.3:o:dell:poweredge_t330_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_t330:-:*:*:*:*:*:*:*

Configuration 65 (hide)

AND

cpe:2.3:o:dell:poweredge_r330_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:poweredge_r330:-:*:*:*:*:*:*:*

Configuration 66 (hide)

AND

cpe:2.3:o:dell:emc_storage_nx3240_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:emc_storage_nx3240:-:*:*:*:*:*:*:*

Configuration 67 (hide)

AND

cpe:2.3:o:dell:emc_storage_nx3340_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:emc_storage_nx3340:-:*:*:*:*:*:*:*

Configuration 68 (hide)

AND

cpe:2.3:o:dell:storage_nx3230_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:storage_nx3230:-:*:*:*:*:*:*:*

Configuration 69 (hide)

AND

cpe:2.3:o:dell:storage_nx3330_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:storage_nx3330:-:*:*:*:*:*:*:*

Configuration 70 (hide)

AND

cpe:2.3:o:dell:storage_nx430_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:storage_nx430:-:*:*:*:*:*:*:*

Configuration 71 (hide)

AND

cpe:2.3:o:dell:emc_xc_core_xc450_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:emc_xc_core_xc450:-:*:*:*:*:*:*:*

Configuration 72 (hide)

AND

cpe:2.3:o:dell:emc_xc_core_xc650_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:emc_xc_core_xc650:-:*:*:*:*:*:*:*

Configuration 73 (hide)

AND

cpe:2.3:o:dell:emc_xc_core_xc750_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:emc_xc_core_xc750:-:*:*:*:*:*:*:*

Configuration 74 (hide)

AND

cpe:2.3:o:dell:emc_xc_core_xc750xa_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:emc_xc_core_xc750xa:-:*:*:*:*:*:*:*

Configuration 75 (hide)

AND

cpe:2.3:o:dell:emc_xc_core_xc6520_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:emc_xc_core_xc6520:-:*:*:*:*:*:*:*

Configuration 76 (hide)

AND

cpe:2.3:o:dell:emc_xc_core_6420_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:emc_xc_core_6420:-:*:*:*:*:*:*:*

Configuration 77 (hide)

AND

cpe:2.3:o:dell:emc_xc_core_xc640_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:emc_xc_core_xc640:-:*:*:*:*:*:*:*

Configuration 78 (hide)

AND

cpe:2.3:o:dell:emc_xc_core_xc740xd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:emc_xc_core_xc740xd:-:*:*:*:*:*:*:*

Configuration 79 (hide)

AND

cpe:2.3:o:dell:emc_xc_core_xc740xd2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:emc_xc_core_xc740xd2:-:*:*:*:*:*:*:*

Configuration 80 (hide)

AND

cpe:2.3:o:dell:emc_xc_core_xc940_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:emc_xc_core_xc940:-:*:*:*:*:*:*:*

Configuration 81 (hide)

AND

cpe:2.3:o:dell:emc_xc_core_xcxr2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:emc_xc_core_xcxr2:-:*:*:*:*:*:*:*

Configuration 82 (hide)

AND

cpe:2.3:o:dell:xc6320_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:xc6320:-:*:*:*:*:*:*:*

Configuration 83 (hide)

AND

cpe:2.3:o:dell:xc430_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:xc430:-:*:*:*:*:*:*:*

Configuration 84 (hide)

AND

cpe:2.3:o:dell:xc630_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:xc630:-:*:*:*:*:*:*:*

Configuration 85 (hide)

AND

cpe:2.3:o:dell:xc730_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:xc730:-:*:*:*:*:*:*:*

Configuration 86 (hide)

AND

cpe:2.3:o:dell:xc730xd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:xc730xd:-:*:*:*:*:*:*:*

History

04 Feb 2025, 17:29

Type	Values Removed	Values Added
CPE		cpe:2.3:h:dell:storage_nx430:-:::::::* cpe:2.3:h:dell:poweredge_r350:-:::::::* cpe:2.3:h:dell:poweredge_xr12:-:::::::* cpe:2.3:h:dell:dss_8440:-:::::::* cpe:2.3:h:dell:poweredge_r730xd:-:::::::* cpe:2.3:h:dell:poweredge_m630_\(pe_vrtx\):-:::::::* cpe:2.3:o:dell:poweredge_r350_firmware:::::::: cpe:2.3:o:dell:poweredge_c4140_firmware:::::::: cpe:2.3:h:dell:poweredge_r430:-:::::::* cpe:2.3:o:dell:emc_xc_core_xcxr2_firmware:::::::: cpe:2.3:h:dell:emc_xc_core_xc6520:-:::::::* cpe:2.3:h:dell:poweredge_c6420:-:::::::* cpe:2.3:o:dell:emc_xc_core_xc640_firmware:::::::: cpe:2.3:h:dell:xc630:-:::::::* cpe:2.3:o:dell:poweredge_m630_firmware:::::::: cpe:2.3:h:dell:emc_xc_core_xc650:-:::::::* cpe:2.3:o:dell:poweredge_mx740c_firmware:::::::: cpe:2.3:h:dell:poweredge_r830:-:::::::* cpe:2.3:o:dell:poweredge_c6320_firmware:::::::: cpe:2.3:h:dell:poweredge_r450:-:::::::* cpe:2.3:o:dell:xc630_firmware:::::::: cpe:2.3:o:dell:emc_xc_core_xc750xa_firmware:::::::: cpe:2.3:h:dell:poweredge_fc430:-:::::::* cpe:2.3:h:dell:poweredge_t550:-:::::::* cpe:2.3:h:dell:poweredge_r540:-:::::::* cpe:2.3:o:dell:poweredge_r650_firmware:::::::: cpe:2.3:h:dell:poweredge_xr11:-:::::::* cpe:2.3:o:dell:poweredge_t360_firmware:::::::: cpe:2.3:h:dell:poweredge_r630:-:::::::* cpe:2.3:h:dell:poweredge_r360:-:::::::* cpe:2.3:o:dell:emc_xc_core_xc6520_firmware:::::::: cpe:2.3:h:dell:poweredge_r250:-:::::::* cpe:2.3:o:dell:poweredge_m830_firmware:::::::: cpe:2.3:o:dell:poweredge_fc630_firmware:::::::: cpe:2.3:h:dell:emc_xc_core_6420:-:::::::* cpe:2.3:o:dell:poweredge_xr4510c_firmware:::::::: cpe:2.3:o:dell:poweredge_c6420_firmware:::::::: cpe:2.3:h:dell:poweredge_r940:-:::::::* cpe:2.3:h:dell:xc430:-:::::::* cpe:2.3:h:dell:poweredge_r330:-:::::::* cpe:2.3:o:dell:poweredge_t550_firmware:::::::: cpe:2.3:h:dell:poweredge_r230:-:::::::* cpe:2.3:h:dell:poweredge_r730:-:::::::* cpe:2.3:o:dell:poweredge_r840_firmware:::::::: cpe:2.3:h:dell:poweredge_xr4510c:-:::::::* cpe:2.3:o:dell:poweredge_t130_firmware:::::::: cpe:2.3:h:dell:poweredge_r440:-:::::::* cpe:2.3:o:dell:poweredge_r530_firmware:::::::: cpe:2.3:o:dell:xc730xd_firmware:::::::: cpe:2.3:h:dell:poweredge_m640_\(pe_vrtx\):-:::::::* cpe:2.3:o:dell:storage_nx3230_firmware:::::::: cpe:2.3:o:dell:xc430_firmware:::::::: cpe:2.3:h:dell:emc_xc_core_xcxr2:-:::::::* cpe:2.3:o:dell:poweredge_r750xa_firmware:::::::: cpe:2.3:h:dell:poweredge_m640:-:::::::* cpe:2.3:o:dell:poweredge_r230_firmware:::::::: cpe:2.3:o:dell:storage_nx3330_firmware:::::::: cpe:2.3:h:dell:poweredge_mx740c:-:::::::* cpe:2.3:h:dell:emc_storage_nx3240:-:::::::* cpe:2.3:h:dell:poweredge_r840:-:::::::* cpe:2.3:o:dell:poweredge_r430_firmware:::::::: cpe:2.3:h:dell:poweredge_r530:-:::::::* cpe:2.3:h:dell:poweredge_xr4520c:-:::::::* cpe:2.3:h:dell:emc_xc_core_xc750:-:::::::* cpe:2.3:h:dell:xc6320:-:::::::* cpe:2.3:h:dell:poweredge_r750xa:-:::::::* cpe:2.3:o:dell:emc_storage_nx3240_firmware:::::::: cpe:2.3:h:dell:xc730xd:-:::::::* cpe:2.3:o:dell:poweredge_r740xd_firmware:::::::: cpe:2.3:h:dell:poweredge_m830_\(pe_vrtx\):-:::::::* cpe:2.3:h:dell:poweredge_r740xd2:-:::::::* cpe:2.3:o:dell:emc_xc_core_xc450_firmware:::::::: cpe:2.3:h:dell:poweredge_r650:-:::::::* cpe:2.3:o:dell:xc6320_firmware:::::::: cpe:2.3:h:dell:emc_xc_core_xc750xa:-:::::::* cpe:2.3:o:dell:poweredge_c6520_firmware:::::::: cpe:2.3:h:dell:poweredge_t330:-:::::::* cpe:2.3:o:dell:poweredge_m640_firmware:::::::: cpe:2.3:o:dell:poweredge_m640_\(pe_vrtx\)_firmware:::::::: cpe:2.3:o:dell:poweredge_xe7420_firmware:::::::: cpe:2.3:o:dell:poweredge_t150_firmware:::::::: cpe:2.3:h:dell:poweredge_m830:-:::::::* cpe:2.3:h:dell:poweredge_t430:-:::::::* cpe:2.3:o:dell:poweredge_r940xa_firmware:::::::: cpe:2.3:o:dell:poweredge_xe7440_firmware:::::::: cpe:2.3:h:dell:emc_storage_nx3340:-:::::::* cpe:2.3:o:dell:emc_xc_core_xc750_firmware:::::::: cpe:2.3:o:dell:poweredge_mx840c_firmware:::::::: cpe:2.3:h:dell:poweredge_xr2:-:::::::* cpe:2.3:h:dell:poweredge_r640:-:::::::* cpe:2.3:o:dell:emc_xc_core_xc650_firmware:::::::: cpe:2.3:h:dell:emc_xc_core_xc940:-:::::::* cpe:2.3:o:dell:poweredge_xe2420_firmware:::::::: cpe:2.3:h:dell:storage_nx3330:-:::::::* cpe:2.3:h:dell:poweredge_fc640:-:::::::* cpe:2.3:o:dell:poweredge_r330_firmware:::::::: cpe:2.3:o:dell:xc730_firmware:::::::: cpe:2.3:o:dell:poweredge_r360_firmware:::::::: cpe:2.3:h:dell:poweredge_c6520:-:::::::* cpe:2.3:o:dell:poweredge_xr11_firmware:::::::: cpe:2.3:o:dell:poweredge_r730_firmware:::::::: cpe:2.3:h:dell:poweredge_c6320:-:::::::* cpe:2.3:o:dell:storage_nx430_firmware:::::::: cpe:2.3:o:dell:poweredge_r440_firmware:::::::: cpe:2.3:o:dell:poweredge_r740xd2_firmware:::::::: cpe:2.3:o:dell:poweredge_fc430_firmware:::::::: cpe:2.3:h:dell:poweredge_t360:-:::::::* cpe:2.3:o:dell:poweredge_r550_firmware:::::::: cpe:2.3:o:dell:poweredge_xr4520c_firmware:::::::: cpe:2.3:o:dell:poweredge_t640_firmware:::::::: cpe:2.3:h:dell:poweredge_xe7420:-:::::::* cpe:2.3:h:dell:poweredge_t440:-:::::::* cpe:2.3:h:dell:poweredge_r740:-:::::::* cpe:2.3:h:dell:poweredge_fc630:-:::::::* cpe:2.3:o:dell:poweredge_t630_firmware:::::::: cpe:2.3:h:dell:poweredge_t630:-:::::::* cpe:2.3:h:dell:poweredge_r750xs:-:::::::* cpe:2.3:o:dell:poweredge_r540_firmware:::::::: cpe:2.3:o:dell:poweredge_t430_firmware:::::::: cpe:2.3:h:dell:poweredge_t350:-:::::::* cpe:2.3:o:dell:poweredge_r750xs_firmware:::::::: cpe:2.3:o:dell:emc_xc_core_xc740xd_firmware:::::::: cpe:2.3:o:dell:emc_xc_core_6420_firmware:::::::: cpe:2.3:o:dell:poweredge_r940_firmware:::::::: cpe:2.3:h:dell:poweredge_xe2420:-:::::::* cpe:2.3:o:dell:poweredge_t350_firmware:::::::: cpe:2.3:o:dell:emc_xc_core_xc940_firmware:::::::: cpe:2.3:h:dell:emc_xc_core_xc640:-:::::::* cpe:2.3:h:dell:poweredge_mx840c:-:::::::* cpe:2.3:o:dell:poweredge_fc640_firmware:::::::: cpe:2.3:h:dell:poweredge_t130:-:::::::* cpe:2.3:o:dell:poweredge_r650xs_firmware:::::::: cpe:2.3:o:dell:poweredge_t440_firmware:::::::: cpe:2.3:o:dell:dss_8440_firmware:::::::: cpe:2.3:h:dell:poweredge_r550:-:::::::* cpe:2.3:o:dell:poweredge_xr12_firmware:::::::: cpe:2.3:h:dell:poweredge_r930:-:::::::* cpe:2.3:h:dell:xc730:-:::::::* cpe:2.3:o:dell:poweredge_r750_firmware:::::::: cpe:2.3:o:dell:poweredge_m630_\(pe_vrtx\)_firmware:::::::: cpe:2.3:o:dell:poweredge_r730xd_firmware:::::::: cpe:2.3:h:dell:emc_xc_core_xc450:-:::::::* cpe:2.3:o:dell:poweredge_r630_firmware:::::::: cpe:2.3:h:dell:emc_xc_core_xc740xd2:-:::::::* cpe:2.3:h:dell:poweredge_xe7440:-:::::::* cpe:2.3:o:dell:poweredge_fc830_firmware:::::::: cpe:2.3:o:dell:poweredge_m830_\(pe_vrtx\)_firmware:::::::: cpe:2.3:o:dell:poweredge_mx750c_firmware:::::::: cpe:2.3:o:dell:poweredge_r250_firmware:::::::: cpe:2.3:o:dell:emc_storage_nx3340_firmware:::::::: cpe:2.3:h:dell:poweredge_fc830:-:::::::* cpe:2.3:o:dell:poweredge_r640_firmware:::::::: cpe:2.3:h:dell:poweredge_mx750c:-:::::::* cpe:2.3:h:dell:poweredge_t150:-:::::::* cpe:2.3:o:dell:poweredge_r930_firmware:::::::: cpe:2.3:o:dell:poweredge_c4130_firmware:::::::: cpe:2.3:o:dell:poweredge_r740_firmware:::::::: cpe:2.3:o:dell:poweredge_r450_firmware:::::::: cpe:2.3:h:dell:poweredge_r940xa:-:::::::* cpe:2.3:h:dell:storage_nx3230:-:::::::* cpe:2.3:h:dell:poweredge_r650xs:-:::::::* cpe:2.3:o:dell:poweredge_xr2_firmware:::::::: cpe:2.3:o:dell:poweredge_r830_firmware:::::::: cpe:2.3:h:dell:poweredge_t640:-:::::::* cpe:2.3:o:dell:poweredge_t330_firmware:::::::: cpe:2.3:h:dell:emc_xc_core_xc740xd:-:::::::* cpe:2.3:h:dell:poweredge_r740xd:-:::::::* cpe:2.3:h:dell:poweredge_c4130:-:::::::* cpe:2.3:h:dell:poweredge_r750:-:::::::* cpe:2.3:o:dell:emc_xc_core_xc740xd2_firmware:::::::: cpe:2.3:h:dell:poweredge_c4140:-:::::::* cpe:2.3:h:dell:poweredge_m630:-:::::::*
CWE		NVD-CWE-noinfo
References	~~() https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability -~~	() https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability - Vendor Advisory
First Time		Dell poweredge T330 Dell poweredge T150 Dell poweredge M830 Firmware Dell poweredge T440 Dell poweredge R540 Dell poweredge R730 Dell poweredge T350 Dell poweredge T130 Firmware Dell poweredge Xr12 Dell poweredge Xr4510c Firmware Dell poweredge R750 Dell xc730xd Dell poweredge T330 Firmware Dell poweredge R830 Firmware Dell poweredge C6520 Firmware Dell poweredge R230 Firmware Dell poweredge Xr11 Firmware Dell poweredge T550 Dell poweredge Fc430 Dell xc430 Firmware Dell emc Xc Core Xc740xd2 Dell poweredge R430 Dell poweredge T640 Dell poweredge R430 Firmware Dell poweredge R530 Firmware Dell poweredge T440 Firmware Dell poweredge R630 Firmware Dell poweredge M830 Dell poweredge R650xs Dell poweredge R750xa Dell poweredge R840 Dell poweredge R740xd2 Dell emc Xc Core Xc740xd2 Firmware Dell xc630 Firmware Dell poweredge R330 Firmware Dell poweredge R930 Firmware Dell poweredge T150 Firmware Dell poweredge Fc430 Firmware Dell emc Xc Core Xc6520 Dell poweredge Mx740c Firmware Dell poweredge R350 Dell poweredge M630 Dell poweredge R740 Firmware Dell poweredge R730xd Firmware Dell poweredge Fc630 Dell poweredge Fc640 Firmware Dell dss 8440 Firmware Dell poweredge R450 Firmware Dell poweredge Mx840c Firmware Dell emc Xc Core Xcxr2 Dell poweredge R750xa Firmware Dell poweredge R250 Dell emc Xc Core Xc640 Dell storage Nx3330 Dell emc Xc Core Xc650 Dell poweredge R540 Firmware Dell poweredge Xe7440 Firmware Dell poweredge R360 Dell poweredge Fc830 Dell poweredge C4140 Dell emc Xc Core Xc740xd Dell poweredge T360 Firmware Dell poweredge Xr4510c Dell poweredge T630 Dell poweredge M630 \(pe Vrtx\) Firmware Dell emc Xc Core Xc640 Firmware Dell poweredge C6420 Dell poweredge R250 Firmware Dell poweredge R530 Dell xc430 Dell xc730xd Firmware Dell poweredge R730 Firmware Dell poweredge Xe7440 Dell poweredge R450 Dell poweredge R640 Dell poweredge M630 Firmware Dell poweredge M830 \(pe Vrtx\) Dell poweredge C6520 Dell storage Nx3230 Dell poweredge R360 Firmware Dell storage Nx3230 Firmware Dell poweredge R740xd Firmware Dell poweredge Xe7420 Firmware Dell poweredge Mx740c Dell dss 8440 Dell poweredge R940xa Dell poweredge M630 \(pe Vrtx\) Dell poweredge Xe7420 Dell emc Xc Core Xc450 Dell poweredge C6420 Firmware Dell poweredge R740 Dell emc Xc Core Xc750xa Dell poweredge R940 Dell poweredge R930 Dell poweredge Xr4520c Dell emc Xc Core Xc650 Firmware Dell storage Nx3330 Firmware Dell poweredge M830 \(pe Vrtx\) Firmware Dell xc730 Dell poweredge R650xs Firmware Dell poweredge Xr2 Firmware Dell poweredge R330 Dell poweredge Fc640 Dell poweredge R940 Firmware Dell emc Storage Nx3340 Firmware Dell emc Storage Nx3240 Dell xc730 Firmware Dell poweredge R230 Dell emc Xc Core 6420 Firmware Dell poweredge R750 Firmware Dell poweredge R440 Dell poweredge M640 \(pe Vrtx\) Firmware Dell poweredge R940xa Firmware Dell poweredge R650 Dell poweredge R830 Dell emc Xc Core Xc6520 Firmware Dell poweredge C4140 Firmware Dell emc Xc Core Xcxr2 Firmware Dell xc630 Dell poweredge C6320 Firmware Dell emc Xc Core Xc740xd Firmware Dell emc Storage Nx3240 Firmware Dell poweredge R740xd2 Firmware Dell poweredge Mx750c Firmware Dell emc Xc Core Xc750 Dell poweredge T430 Dell poweredge Xr4520c Firmware Dell poweredge T630 Firmware Dell emc Xc Core 6420 Dell emc Xc Core Xc750xa Firmware Dell poweredge T130 Dell poweredge R550 Firmware Dell poweredge Xr11 Dell poweredge R440 Firmware Dell poweredge R750xs Dell poweredge Mx750c Dell poweredge M640 Firmware Dell emc Xc Core Xc940 Firmware Dell emc Xc Core Xc940 Dell poweredge T550 Firmware Dell Dell emc Xc Core Xc750 Firmware Dell emc Storage Nx3340 Dell poweredge R750xs Firmware Dell poweredge T430 Firmware Dell poweredge R550 Dell storage Nx430 Firmware Dell poweredge R840 Firmware Dell xc6320 Firmware Dell poweredge C6320 Dell poweredge R640 Firmware Dell poweredge T350 Firmware Dell poweredge R730xd Dell poweredge C4130 Dell poweredge T360 Dell storage Nx430 Dell poweredge M640 \(pe Vrtx\) Dell poweredge R350 Firmware Dell poweredge T640 Firmware Dell poweredge Xe2420 Dell xc6320 Dell poweredge Xr12 Firmware Dell poweredge Fc830 Firmware Dell poweredge C4130 Firmware Dell emc Xc Core Xc450 Firmware Dell poweredge Xe2420 Firmware Dell poweredge Fc630 Firmware Dell poweredge Xr2 Dell poweredge R630 Dell poweredge R740xd Dell poweredge M640 Dell poweredge Mx840c Dell poweredge R650 Firmware

21 Nov 2024, 08:45

Type	Values Removed	Values Added
Summary		(es) Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contienen una vulnerabilidad de verificación del búfer de comunicación SMM incorrecta. Un atacante local con pocos privilegios podría explotar esta vulnerabilidad y provocar escrituras arbitrarias en SMRAM.
References	~~() https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability -~~	() https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability -

13 Mar 2024, 16:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-03-13 16:15

Updated : 2025-02-04 17:29

NVD link : CVE-2024-0161

Mitre link : CVE-2024-0161

CVE.ORG link : CVE-2024-0161

JSON object : View

Products Affected

dell

poweredge_r650_firmware
emc_xc_core_xc750xa_firmware
poweredge_r730xd
poweredge_xr4510c_firmware
poweredge_t360_firmware
emc_xc_core_xc450
poweredge_r640_firmware
poweredge_r630_firmware
poweredge_r740xd2
poweredge_m640
poweredge_r740
storage_nx3330
poweredge_mx840c
poweredge_xe2420
poweredge_t430_firmware
emc_xc_core_6420_firmware
poweredge_r730xd_firmware
poweredge_r740xd
emc_xc_core_xc6520_firmware
poweredge_c6520
poweredge_r330_firmware
emc_storage_nx3240
poweredge_r430_firmware
poweredge_r930_firmware
poweredge_xr11
poweredge_r530
poweredge_r840_firmware
emc_xc_core_xc940
poweredge_t640_firmware
poweredge_xr4520c_firmware
poweredge_xr12
poweredge_m630_\(pe_vrtx\)
poweredge_fc630_firmware
poweredge_r230_firmware
poweredge_r750xs_firmware
poweredge_r840
poweredge_r250_firmware
poweredge_xr2_firmware
emc_xc_core_xc750
poweredge_r540
storage_nx430_firmware
poweredge_c4130_firmware
poweredge_mx750c_firmware
poweredge_c6520_firmware
emc_xc_core_xc740xd2_firmware
storage_nx3230_firmware
poweredge_r330
poweredge_m630_firmware
poweredge_fc430_firmware
poweredge_xe7440
poweredge_c6320_firmware
emc_xc_core_xc740xd2
poweredge_fc640_firmware
poweredge_c6320
poweredge_r740xd_firmware
emc_xc_core_xcxr2
poweredge_m830
poweredge_xr11_firmware
poweredge_r940xa_firmware
poweredge_r750xs
poweredge_r350_firmware
poweredge_fc630
poweredge_r930
poweredge_xe2420_firmware
poweredge_r730_firmware
emc_xc_core_xc740xd
poweredge_r940
poweredge_t330_firmware
poweredge_c6420_firmware
poweredge_m630
emc_storage_nx3340
poweredge_t360
poweredge_t130
poweredge_r440_firmware
xc6320_firmware
poweredge_m830_\(pe_vrtx\)_firmware
poweredge_r440
poweredge_r750xa
poweredge_t550_firmware
poweredge_r740xd2_firmware
xc730
poweredge_r550
poweredge_r650xs
poweredge_mx740c_firmware
emc_xc_core_xc6520
poweredge_t640
emc_xc_core_xc650_firmware
poweredge_r750xa_firmware
poweredge_mx840c_firmware
emc_xc_core_6420
storage_nx3230
poweredge_r740_firmware
poweredge_r640
poweredge_m630_\(pe_vrtx\)_firmware
emc_xc_core_xc650
poweredge_m640_firmware
poweredge_r450_firmware
poweredge_r450
poweredge_r550_firmware
poweredge_r540_firmware
emc_xc_core_xc640_firmware
emc_xc_core_xc640
poweredge_t350
xc630
poweredge_r360_firmware
poweredge_c6420
poweredge_m830_firmware
poweredge_mx750c
xc430
emc_xc_core_xc940_firmware
poweredge_fc830_firmware
poweredge_t130_firmware
xc730xd_firmware
poweredge_mx740c
poweredge_xr12_firmware
dss_8440
poweredge_c4130
poweredge_r940xa
poweredge_t630_firmware
poweredge_r650
poweredge_t150
emc_xc_core_xcxr2_firmware
poweredge_t150_firmware
poweredge_c4140_firmware
poweredge_r650xs_firmware
poweredge_xe7440_firmware
poweredge_t330
poweredge_r830_firmware
emc_xc_core_xc450_firmware
poweredge_fc640
poweredge_r630
poweredge_r360
poweredge_t630
emc_storage_nx3340_firmware
poweredge_m640_\(pe_vrtx\)
xc730_firmware
poweredge_r530_firmware
xc730xd
storage_nx430
poweredge_r250
poweredge_xe7420_firmware
emc_storage_nx3240_firmware
xc430_firmware
poweredge_t350_firmware
poweredge_fc830
poweredge_r730
poweredge_r750_firmware
xc630_firmware
poweredge_t440
poweredge_xr4520c
poweredge_t430
poweredge_xr4510c
poweredge_m640_\(pe_vrtx\)_firmware
poweredge_t550
emc_xc_core_xc750_firmware
poweredge_r430
emc_xc_core_xc750xa
poweredge_r350
xc6320
poweredge_r940_firmware
poweredge_c4140
poweredge_r230
poweredge_xr2
poweredge_r830
storage_nx3330_firmware
poweredge_fc430
emc_xc_core_xc740xd_firmware
poweredge_xe7420
poweredge_m830_\(pe_vrtx\)
poweredge_r750
poweredge_t440_firmware
dss_8440_firmware

CWE

CWE-20

Improper Input Validation

NVD-CWE-noinfo

7.2 /10