CVE-2024-25942

Published Mar 19, 2024

Last updated 10 months ago

Overview

Description
Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.
Source
security_alert@emc.com
NVD status
Analyzed
Products
poweredge_r730_firmware, poweredge_r730xd_firmware, poweredge_r630_firmware, poweredge_c4130_firmware, poweredge_r930_firmware, poweredge_m630_firmware, poweredge_m630_\(pe_vrtx\)_firmware, poweredge_fc630_firmware, poweredge_fc430_firmware, poweredge_m830_firmware, poweredge_m830_\(pe_vrtx\)_firmware, poweredge_fc830_firmware, poweredge_t630_firmware, poweredge_r530_firmware, poweredge_r430_firmware, poweredge_t430_firmware, poweredge_r830_firmware, poweredge_c6320_firmware, nx3230_firmware, nx3330_firmware, xc6320_firmware, xc430_firmware, xc630_firmware, xc730_firmware, xc730xd_firmware

Risk scores

CVSS 3.1

Type
Primary
Base score
6.8
Impact score
5.8
Exploitability score
0.5
Vector string
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
Severity
MEDIUM

Weaknesses

security_alert@emc.com
CWE-20
nvd@nist.gov
CWE-787

Social media

Hype score
Not currently trending

Configurations