CVE-2024-0162

Summary

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM.

Affected Software

VendorProductVersion RangeStatus
DellPowerEdge BIOS Intel 16GN/A < 2.0.0affected
DellPowerEdge BIOS Intel 16GN/A < 1.7.6affected
DellPowerEdge BIOS Intel 16GN/A < 1.7.2affected
DellPowerEdge BIOS Intel 16GN/A < 1.2.3affected
DellPowerEdge BIOS Intel 16GN/A < 1.13.2affected
DellPowerEdge BIOS Intel 16GN/A < 1.9.1affected
DellPowerEdge BIOS Intel 16GN/A < 1.14.1affected
DellPowerEdge BIOS Intel 16GN/A < 2.14.1affected

Weaknesses

  • CWE-119: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References