CVE-2024-0154
3.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Summary
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Dell | PowerEdge Platform | N/A < 2.0.0 | affected |
| Dell | PowerEdge Platform | N/A < 1.7.6 | affected |
| Dell | PowerEdge Platform | N/A < 1.7.2 | affected |
| Dell | PowerEdge Platform | N/A < 1.2.3 | affected |
| Dell | PowerEdge Platform | N/A < 1.13.2 | affected |
| Dell | PowerEdge Platform | N/A < 1.14.1 | affected |
| Dell | PowerEdge Platform | N/A < 1.9.1 | affected |
| Dell | PowerEdge Platform | N/A < 2.14.1 | affected |
| Dell | PowerEdge Platform | N/A < 2.21.2 | affected |
| Dell | PowerEdge Platform | N/A < 2.21.1 | affected |
| Dell | PowerEdge Platform | N/A < 2.21.0 | affected |
| Dell | PowerEdge Platform | N/A < 2.16.0 | affected |
| Dell | PowerEdge Platform | N/A < 2.19.0 | affected |
| Dell | PowerEdge Platform | N/A < 2.14.0 | affected |
| Dell | PowerEdge Platform | N/A < 1.19.0 | affected |
| Dell | PowerEdge Platform | N/A < 2.20.0 | affected |
Weaknesses
- CWE-788: CWE-788: Access of Memory Location After End of Buffer
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.