3.8
Faible
CVE-2024-0154 Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability
Description
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PowerEdge Platform 2.21 | premières → < 2.21.2 | 2.21.2 |
| PowerEdge Platform 2.16 | premières → < 2.16.0 | 2.16.0 |
| PowerEdge Platform 2.14 | premières → < 2.14.1 | 2.14.1 |
| PowerEdge Platform 2.0 | premières → < 2.0.0 | 2.0.0 |
| PowerEdge Platform 1.14 | premières → < 1.14.1 | 1.14.1 |
| PowerEdge Platform 1.13 | premières → < 1.13.2 | 1.13.2 |
| PowerEdge Platform 1.9 | premières → < 1.9.1 | 1.9.1 |
| PowerEdge Platform 1.7 | premières → < 1.7.6 | 1.7.6 |
| PowerEdge Platform 1.2 | premières → < 1.2.3 | 1.2.3 |
Autres CVE de PowerEdge Platform
Les 32 CVE de PowerEdge Platform →
CVE-2024-38304
Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of…
3.8
Faible
CVE-2024-38303
Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Improper Input Validation vulnerability
5.3
Moyenne
CVE-2024-0171
Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability
5.3
Moyenne
CVE-2024-0172
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability
7.9
Élevée