4.4
Medium
CVE-2024-25942 Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability
Description
Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerEdge Platform 2.14 | earliest → < 2.14.0 | 2.14.0 |
| PowerEdge Platform 1.19 | earliest → < 1.19.0 | 1.19.0 |
Other CVEs of PowerEdge Platform
The 32 CVEs of PowerEdge Platform →
CVE-2024-38304
Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of…
3.8
Low
CVE-2024-38303
Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Improper Input Validation vulnerability
5.3
Medium
CVE-2024-0171
Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability
5.3
Medium
CVE-2024-0172
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability
7.9
High