CVSS 3.1
3.3 lowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NCVE-2024-0154
Low (3.3) in dell. EPSS 0.2% chance of exploitation in the next 30 days.
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-125, CWE-788
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:dss_8440_firmware
- dell:emc_xc_core_6420_system_firmware
- dell:emc_xc_core_xc450_firmware
- dell:emc_xc_core_xc640_system_firmware
- dell:emc_xc_core_xc650_firmware
- dell:emc_xc_core_xc6520_firmware
- dell:emc_xc_core_xc740xd2_firmware
- dell:emc_xc_core_xc740xd_system_firmware
- dell:emc_xc_core_xc750_firmware
- dell:emc_xc_core_xc750xa_firmware
- dell:emc_xc_core_xc7525_firmware
- dell:emc_xc_core_xc940_system_firmware
- dell:emc_xc_core_xcxr2_firmware
- dell:nx3230_firmware
- dell:nx3240_firmware
- dell:nx3330_firmware
- dell:nx3340_firmware
- dell:nx430_firmware
- dell:nx440_firmware
- dell:poweredge_c4130_firmware
- dell:poweredge_c4140_firmware
- dell:poweredge_c6320_firmware
- dell:poweredge_c6420_firmware
- dell:poweredge_c6520_firmware
- dell:poweredge_c6525_firmware
- dell:poweredge_c6615_firmware
- dell:poweredge_c6620_firmware
- dell:poweredge_fc430_firmware
- dell:poweredge_fc630_firmware
- dell:poweredge_fc640_firmware
- dell:poweredge_fc830_firmware
- dell:poweredge_hs5610_firmware
- dell:poweredge_hs5620_firmware
- dell:poweredge_m630_\(pe_vrtx\)_firmware
- dell:poweredge_m630_firmware
- dell:poweredge_m640_\(pe_vrtx\)_firmware
- dell:poweredge_m640_firmware
- dell:poweredge_m830_\(pe_vrtx\)_firmware
- dell:poweredge_m830_firmware
- dell:poweredge_mx740c_firmware
- dell:poweredge_mx750c_firmware
- dell:poweredge_mx760c_firmware
- dell:poweredge_mx840c_firmware
- dell:poweredge_r230_firmware
- dell:poweredge_r240_firmware
- dell:poweredge_r250_firmware
- dell:poweredge_r330_firmware
- dell:poweredge_r340_firmware
- dell:poweredge_r350_firmware
- dell:poweredge_r430_firmware
References
- https://www.dell.com/support/kbdoc/en-us/000222898/dsa-2024-034-security-update-for-dell-poweredge-server-bios-for-an-improper-parameter-initialization-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000222898/dsa-2024-034-security-update-for-dell-poweredge-server-bios-for-an-improper-parameter-initialization-vulnerability