The vulnerability of Dell PowerEdge 14G server and Dell Precision workstation microprogramming software relates to writing beyond the buffer boundaries, allowing an attacker to execute arbitrary code or escalate their privileges.

🗓️ 11 Mar 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Buffer overflow in Dell PowerEdge 14G servers enables code execution or privilege escalation.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-25537	22 May 202314:25	–	circl
CNNVD	Dell PowerEdge Server BIOS 缓冲区错误漏洞	22 May 202300:00	–	cnnvd
CVE	CVE-2023-25537	22 May 202310:48	–	cve
Cvelist	CVE-2023-25537	22 May 202310:48	–	cvelist
EUVD	EUVD-2023-29489	3 Oct 202520:07	–	euvd
NVD	CVE-2023-25537	22 May 202311:15	–	nvd
OSV	CVE-2023-25537	22 May 202311:15	–	osv
Prion	Privilege escalation	22 May 202311:15	–	prion
Positive Technologies	PT-2023-8776 · Dell · Dell Precision Bios +1	22 May 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-25537	22 May 202310:48	–	vulnrichment

Vulners

Node

dell_technologies poweredge_r740Range<2.18.1

OR

dell_technologies poweredge_r740xdRange<2.18.1

OR

dell_technologies poweredge_r640Range<2.18.1

OR

dell_technologies poweredge_r940Range<2.18.1

OR

dell_technologies poweredge_r540Range<2.18.1

OR

dell_technologies poweredge_r440Range<2.18.1

OR

dell_technologies poweredge_t440Range<2.18.1

OR

dell_technologies poweredge_xr2Range<2.18.1

OR

dell_technologies poweredge_r740xd2Range<2.18.1

OR

dell_technologies poweredge_r840Range<2.18.1

OR

dell_technologies poweredge_r940xaRange<2.18.1

OR

dell_technologies poweredge_t640Range<2.18.1

OR

dell_technologies poweredge_c6420Range<2.18.1

OR

dell_technologies poweredge_fc640Range<2.18.1

OR

dell_technologies poweredge_m640Range<2.18.1

OR

dell_technologies poweredge_m640_(for_pe_vrtx)Range<2.18.1

OR

dell_technologies poweredge_mx740cRange<2.18.1

OR

dell_technologies poweredge_mx840cRange<2.18.1

OR

dell_technologies poweredge_c4140Range<2.18.1

OR

dell_technologies dss_8440Range<2.18.1

OR

dell_technologies poweredge_xe2420Range<2.18.1

OR

dell_technologies poweredge_xe7420Range<2.18.1

OR

dell_technologies poweredge_xe7440Range<2.18.1

OR

dell_technologies emc_storage_nx3240Range<2.18.1

OR

dell_technologies emc_storage_nx3340Range<2.18.1

OR

dell_technologies emc_xc_core_6420_systemRange<2.18.1

OR

dell_technologies emc_xc_core_xc640_systemRange<2.18.1

OR

dell_technologies emc_xc_core_xc740xd2Range<2.18.1

OR

dell_technologies emc_xc_core_xc940_systemRange<2.18.1

OR

dell_technologies emc_xc_core_xcxr2Range<2.18.1

Source	Link
dell	www.dell.com/support/kbdoc/en-us/000213550/dsa-2023-098-security-update-for-dell-poweredge-14g-server-bios-for-an-out-of-bounds-write-vulnerability
web	www.web.nvd.nist.gov/view/vuln/detail

11 Mar 2024 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 26.8

CVSS 37.8

EPSS0.0018

buffer overflow poweredge 14g servers precision workstations code execution privilege escalation