CVSS 3.1
8.4 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:HCVE-2024-0161
High (8.4) in dell. EPSS 0.2% chance of exploitation in the next 30 days.
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:dss_8440_firmware
- dell:emc_storage_nx3240_firmware
- dell:emc_storage_nx3340_firmware
- dell:emc_xc_core_6420_firmware
- dell:emc_xc_core_xc450_firmware
- dell:emc_xc_core_xc640_firmware
- dell:emc_xc_core_xc650_firmware
- dell:emc_xc_core_xc6520_firmware
- dell:emc_xc_core_xc740xd2_firmware
- dell:emc_xc_core_xc740xd_firmware
- dell:emc_xc_core_xc750_firmware
- dell:emc_xc_core_xc750xa_firmware
- dell:emc_xc_core_xc940_firmware
- dell:emc_xc_core_xcxr2_firmware
- dell:poweredge_c4130_firmware
- dell:poweredge_c4140_firmware
- dell:poweredge_c6320_firmware
- dell:poweredge_c6420_firmware
- dell:poweredge_c6520_firmware
- dell:poweredge_fc430_firmware
- dell:poweredge_fc630_firmware
- dell:poweredge_fc640_firmware
- dell:poweredge_fc830_firmware
- dell:poweredge_m630_\(pe_vrtx\)_firmware
- dell:poweredge_m630_firmware
- dell:poweredge_m640_\(pe_vrtx\)_firmware
- dell:poweredge_m640_firmware
- dell:poweredge_m830_\(pe_vrtx\)_firmware
- dell:poweredge_m830_firmware
- dell:poweredge_mx740c_firmware
- dell:poweredge_mx750c_firmware
- dell:poweredge_mx840c_firmware
- dell:poweredge_r230_firmware
- dell:poweredge_r250_firmware
- dell:poweredge_r330_firmware
- dell:poweredge_r350_firmware
- dell:poweredge_r360_firmware
- dell:poweredge_r430_firmware
- dell:poweredge_r440_firmware
- dell:poweredge_r450_firmware
- dell:poweredge_r530_firmware
- dell:poweredge_r540_firmware
- dell:poweredge_r550_firmware
- dell:poweredge_r630_firmware
- dell:poweredge_r640_firmware
- dell:poweredge_r650_firmware
- dell:poweredge_r650xs_firmware
- dell:poweredge_r730_firmware
- dell:poweredge_r730xd_firmware
- dell:poweredge_r740_firmware
References
- https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability