CVSS 3.1
6.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:NCVE-2024-38304
Medium (6.5) in dell. EPSS 0.1% chance of exploitation in the next 30 days.
Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
- CWE
- CWE-788
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:dss_8440_firmware
- dell:emc_storage_nx3240_firmware
- dell:emc_storage_nx3340_firmware
- dell:emc_xc_core_6420_system_firmware
- dell:emc_xc_core_xc640_system_firmware
- dell:emc_xc_core_xc740xd2_firmware
- dell:emc_xc_core_xc740xd_system_firmware
- dell:emc_xc_core_xc940_system_firmware
- dell:emc_xc_core_xcxr2_firmware
- dell:poweredge_c4140_firmware
- dell:poweredge_c6420_firmware
- dell:poweredge_fc640_firmware
- dell:poweredge_m640_\(for_pe_vrtx\)_firmware
- dell:poweredge_m640_firmware
- dell:poweredge_mx740c_firmware
- dell:poweredge_mx840c_firmware
- dell:poweredge_r440_firmware
- dell:poweredge_r540_firmware
- dell:poweredge_r640_firmware
- dell:poweredge_r740_firmware
- dell:poweredge_r740xd2_firmware
- dell:poweredge_r740xd_firmware
- dell:poweredge_r840_firmware
- dell:poweredge_r940_firmware
- dell:poweredge_r940xa_firmware
- dell:poweredge_t440_firmware
- dell:poweredge_t640_firmware
- dell:poweredge_xe2420_firmware
- dell:poweredge_xe7420_firmware
- dell:poweredge_xe7440_firmware
- dell:poweredge_xr2_firmware