CVE-2024-0162

Published: Mar 13, 2024Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: NVD

Description

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM.

Affected (58)

Dell

58 products

Poweredge R660 Firmware

Poweredge R760 Firmware

Poweredge C6620 Firmware

Poweredge Mx760c Firmware

Poweredge R860 Firmware

Poweredge R960 Firmware

Poweredge Hs5610 Firmware

Poweredge Hs5620 Firmware

Poweredge R660xs Firmware

Poweredge R760xs Firmware

Poweredge R760xd2 Firmware

Poweredge T560 Firmware

Poweredge R760xa Firmware

Poweredge Xe9680 Firmware

Poweredge Xr5610 Firmware

Poweredge Xr8610t Firmware

Poweredge Xr8620t Firmware

Poweredge Xr7620 Firmware

Poweredge Xe8640 Firmware

Poweredge Xe9640 Firmware

Poweredge R6615 Firmware

Poweredge R7615 Firmware

Poweredge R6625 Firmware

Poweredge R7625 Firmware

Poweredge C6615 Firmware

Poweredge R650 Firmware

Poweredge R750 Firmware

Poweredge R750xa Firmware

Poweredge C6520 Firmware

Poweredge Mx750c Firmware

Poweredge R550 Firmware

Poweredge R450 Firmware

Poweredge R650xs Firmware

Poweredge R750xs Firmware

Poweredge T550 Firmware

Poweredge Xr11 Firmware

Poweredge Xr12 Firmware

Poweredge T150 Firmware

Poweredge T350 Firmware

Poweredge R250 Firmware

Poweredge R350 Firmware

Poweredge Xr4510c Firmware

Poweredge Xr4520c Firmware

Poweredge R6515 Firmware

Poweredge R6525 Firmware

Poweredge R7515 Firmware

Poweredge R7525 Firmware

Poweredge C6525 Firmware

Poweredge Xe8545 Firmware

Xc Core Xc660 Firmware

Xc Core Xc760 Firmware

Xc Core Xc7625 Firmware

Emc Xc Core Xc450 Firmware

Emc Xc Core Xc650 Firmware

Emc Xc Core Xc750 Firmware

Emc Xc Core Xc750xa Firmware

Emc Xc Core Xc6520 Firmware

Emc Xc Core Xc7525 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R660 Firmware	Before 2.0.0

Running on/with	Platform Versions
Dell Poweredge R660	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R760 Firmware	Before 2.0.0

Running on/with	Platform Versions
Dell Poweredge R760	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge C6620 Firmware	Before 2.0.0

Running on/with	Platform Versions
Dell Poweredge C6620	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Mx760c Firmware	Before 2.0.0

Running on/with	Platform Versions
Dell Poweredge Mx760c	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R860 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Poweredge R860	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R960 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Poweredge R960	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Hs5610 Firmware	Before 2.0.0

Running on/with	Platform Versions
Dell Poweredge Hs5610	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Hs5620 Firmware	Before 2.0.0

Running on/with	Platform Versions
Dell Poweredge Hs5620	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R660xs Firmware	Before 2.0.0

Running on/with	Platform Versions
Dell Poweredge R660xs	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R760xs Firmware	Before 2.0.0

Running on/with	Platform Versions
Dell Poweredge R760xs	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R760xd2 Firmware	Before 2.0.0

Running on/with	Platform Versions
Dell Poweredge R760xd2	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T560 Firmware	Before 2.0.0

Running on/with	Platform Versions
Dell Poweredge T560	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R760xa Firmware	Before 2.0.0

Running on/with	Platform Versions
Dell Poweredge R760xa	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xe9680 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Poweredge Xe9680	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xr5610 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Poweredge Xr5610	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xr8610t Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Poweredge Xr8610t	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xr8620t Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Poweredge Xr8620t	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xr7620 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Poweredge Xr7620	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xe8640 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Poweredge Xe8640	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xe9640 Firmware	Before 1.8.0

Running on/with	Platform Versions
Dell Poweredge Xe9640	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R6615 Firmware	Before 1.7.2

Running on/with	Platform Versions
Dell Poweredge R6615	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R7615 Firmware	Before 1.7.2

Running on/with	Platform Versions
Dell Poweredge R7615	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R6625 Firmware	Before 1.7.2

Running on/with	Platform Versions
Dell Poweredge R6625	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R7625 Firmware	Before 1.7.2

Running on/with	Platform Versions
Dell Poweredge R7625	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge C6615 Firmware	Before 1.2.3

Running on/with	Platform Versions
Dell Poweredge C6615	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R650 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge R650	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R750 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge R750	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R750xa Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge R750xa	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge C6520 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge C6520	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Mx750c Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge Mx750c	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R550 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge R550	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R450 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge R450	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R650xs Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge R650xs	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R750xs Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge R750xs	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T550 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge T550	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xr11 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge Xr11	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xr12 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge Xr12	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T150 Firmware	Before 1.9.1

Running on/with	Platform Versions
Dell Poweredge T150	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T350 Firmware	Before 1.9.1

Running on/with	Platform Versions
Dell Poweredge T350	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R250 Firmware	Before 1.9.1

Running on/with	Platform Versions
Dell Poweredge R250	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R350 Firmware	Before 1.9.1

Running on/with	Platform Versions
Dell Poweredge R350	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xr4510c Firmware	Before 1.14.1

Running on/with	Platform Versions
Dell Poweredge Xr4510c	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xr4520c Firmware	Before 1.14.1

Running on/with	Platform Versions
Dell Poweredge Xr4520c	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R6515 Firmware	Before 2.14.1

Running on/with	Platform Versions
Dell Poweredge R6515	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R6525 Firmware	Before 2.14.1

Running on/with	Platform Versions
Dell Poweredge R6525	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R7515 Firmware	Before 2.14.1

Running on/with	Platform Versions
Dell Poweredge R7515	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R7525 Firmware	Before 2.14.1

Running on/with	Platform Versions
Dell Poweredge R7525	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge C6525 Firmware	Before 2.14.1

Running on/with	Platform Versions
Dell Poweredge C6525	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xe8545 Firmware	Before 2.14.1

Running on/with	Platform Versions
Dell Poweredge Xe8545	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xc Core Xc660 Firmware	Before 2.0.0

Running on/with	Platform Versions
Dell Xc Core Xc660	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xc Core Xc760 Firmware	Before 2.0.0

Running on/with	Platform Versions
Dell Xc Core Xc760	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xc Core Xc7625 Firmware	Before 1.7.2

Running on/with	Platform Versions
Dell Xc Core Xc7625	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc450 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Emc Xc Core Xc450	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc650 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Emc Xc Core Xc650	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc750 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Emc Xc Core Xc750	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc750xa Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Emc Xc Core Xc750xa	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc6520 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Emc Xc Core Xc6520	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc7525 Firmware	Before 2.14.1

Running on/with	Platform Versions
Dell Emc Xc Core Xc7525	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

https://www.dell.com/support/kbdoc/en-us/000222812/dsa-2024-004-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000222812/dsa-2024-004-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.