3.8
Low
CVE-2024-0173 Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability
Description
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerEdge Platform 2.21 | earliest → < 2.21.2 | 2.21.2 |
| PowerEdge Platform 2.16 | earliest → < 2.16.0 | 2.16.0 |
| PowerEdge Platform 2.14 | earliest → < 2.14.1 | 2.14.1 |
| PowerEdge Platform 2.0 | earliest → < 2.0.0 | 2.0.0 |
| PowerEdge Platform 1.14 | earliest → < 1.14.1 | 1.14.1 |
| PowerEdge Platform 1.13 | earliest → < 1.13.2 | 1.13.2 |
| PowerEdge Platform 1.9 | earliest → < 1.9.1 | 1.9.1 |
| PowerEdge Platform 1.7 | earliest → < 1.7.6 | 1.7.6 |
| PowerEdge Platform 1.2 | earliest → < 1.2.3 | 1.2.3 |