CVSS 3.1
6.0 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:HCVE-2024-22453
Medium (6.0) in dell. EPSS 0.2% chance of exploitation in the next 30 days.
Dell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high privileged attacker could potentially exploit this vulnerability to write to otherwise unauthorized memory.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-122
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:nx3230_firmware
- dell:nx3330_firmware
- dell:poweredge_c4130_firmware
- dell:poweredge_c6320_firmware
- dell:poweredge_fc430_firmware
- dell:poweredge_fc630_firmware
- dell:poweredge_fc830_firmware
- dell:poweredge_m630_\(pe_vrtx\)_firmware
- dell:poweredge_m630_firmware
- dell:poweredge_m830_\(pe_vrtx\)_firmware
- dell:poweredge_m830_firmware
- dell:poweredge_r430_firmware
- dell:poweredge_r530_firmware
- dell:poweredge_r630_firmware
- dell:poweredge_r730_firmware
- dell:poweredge_r730xd_firmware
- dell:poweredge_r830_firmware
- dell:poweredge_r930_firmware
- dell:poweredge_t430_firmware
- dell:poweredge_t630_firmware
- dell:xc430_firmware
- dell:xc630_firmware
- dell:xc6320_firmware
- dell:xc730_firmware
- dell:xc730xd_firmware
References
- https://www.dell.com/support/kbdoc/en-us/000223209/dsa-2024-105-security-update-for-dell-poweredge-server-bios-for-a-heap-based-buffer-overflow-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000223209/dsa-2024-105-security-update-for-dell-poweredge-server-bios-for-a-heap-based-buffer-overflow-vulnerability