CVSS 3.1
8.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HCVE-2024-0162
High (8.8) in dell. EPSS 0.2% chance of exploitation in the next 30 days.
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:emc_xc_core_xc450_firmware
- dell:emc_xc_core_xc650_firmware
- dell:emc_xc_core_xc6520_firmware
- dell:emc_xc_core_xc750_firmware
- dell:emc_xc_core_xc750xa_firmware
- dell:emc_xc_core_xc7525_firmware
- dell:poweredge_c6520_firmware
- dell:poweredge_c6525_firmware
- dell:poweredge_c6615_firmware
- dell:poweredge_c6620_firmware
- dell:poweredge_hs5610_firmware
- dell:poweredge_hs5620_firmware
- dell:poweredge_mx750c_firmware
- dell:poweredge_mx760c_firmware
- dell:poweredge_r250_firmware
- dell:poweredge_r350_firmware
- dell:poweredge_r450_firmware
- dell:poweredge_r550_firmware
- dell:poweredge_r650_firmware
- dell:poweredge_r650xs_firmware
- dell:poweredge_r6515_firmware
- dell:poweredge_r6525_firmware
- dell:poweredge_r660_firmware
- dell:poweredge_r660xs_firmware
- dell:poweredge_r6615_firmware
- dell:poweredge_r6625_firmware
- dell:poweredge_r750_firmware
- dell:poweredge_r750xa_firmware
- dell:poweredge_r750xs_firmware
- dell:poweredge_r7515_firmware
- dell:poweredge_r7525_firmware
- dell:poweredge_r760_firmware
- dell:poweredge_r760xa_firmware
- dell:poweredge_r760xd2_firmware
- dell:poweredge_r760xs_firmware
- dell:poweredge_r7615_firmware
- dell:poweredge_r7625_firmware
- dell:poweredge_r860_firmware
- dell:poweredge_r960_firmware
- dell:poweredge_t150_firmware
- dell:poweredge_t350_firmware
- dell:poweredge_t550_firmware
- dell:poweredge_t560_firmware
- dell:poweredge_xe8545_firmware
- dell:poweredge_xe8640_firmware
- dell:poweredge_xe9640_firmware
- dell:poweredge_xe9680_firmware
- dell:poweredge_xr11_firmware
- dell:poweredge_xr12_firmware
- dell:poweredge_xr4510c_firmware
References
- https://www.dell.com/support/kbdoc/en-us/000222812/dsa-2024-004-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000222812/dsa-2024-004-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability