The vulnerability of the BIOS microprogramming software in Dell PowerEdge servers and Dell Precision Rack workstations allows a hacker to write arbitrary data into the SMRAM (System Management RAM) area.

🗓️ 20 Mar 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Dell BIOS vulnerability enables arbitrary writes to System Management RAM on PowerEdge servers and Precision Rack workstations.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-0162	13 Mar 202418:21	–	circl
CNNVD	Dell PowerEdge Server BIOS 和 Dell Precision Rack BIOS 缓冲区错误漏洞	13 Mar 202400:00	–	cnnvd
CNVD	Dell PowerEdge Server BIOS and Dell Precision Rack BIOS Buffer Overflow Vulnerability	15 Mar 202400:00	–	cnvd
CVE	CVE-2024-0162	13 Mar 202416:18	–	cve
Cvelist	CVE-2024-0162	13 Mar 202416:18	–	cvelist
EUVD	EUVD-2024-15961	3 Oct 202520:07	–	euvd
NVD	CVE-2024-0162	13 Mar 202417:15	–	nvd
OSV	CVE-2024-0162	13 Mar 202417:15	–	osv
Prion	Design/Logic Flaw	13 Mar 202417:15	–	prion
Positive Technologies	PT-2024-2242 · Dell · Dell Precision Rack Bios +1	12 Mar 202400:00	–	ptsecurity

Vulners

Node

dell_technologies poweredge_r660Range<2.0.0

dell_technologies poweredge_r760Range<2.0.0

dell_technologies poweredge_c6620Range<2.0.0

dell_technologies poweredge_mx760cRange<2.0.0

dell_technologies poweredge_r860Range<1.7.6

dell_technologies poweredge_r960Range<1.7.6

dell_technologies poweredge_hs5610Range<2.0.0

dell_technologies poweredge_hs5620Range<2.0.0

dell_technologies poweredge_r660xsRange<2.0.0

dell_technologies poweredge_r760xsRange<2.0.0

dell_technologies poweredge_r760xd2Range<2.0.0

dell_technologies poweredge_t560Range<2.0.0

dell_technologies poweredge_r760xaRange<2.0.0

dell_technologies poweredge_xe9680Range<1.7.6

dell_technologies poweredge_xr5610Range<1.7.6

dell_technologies poweredge_xr8610tRange<1.7.6

dell_technologies poweredge_xr8620tRange<1.7.6

dell_technologies poweredge_xr7620Range<1.7.6

dell_technologies poweredge_xe8640Range<1.7.6

dell_technologies poweredge_xe9640Range<1.7.6

dell_technologies poweredge_r6615Range<1.7.2

dell_technologies poweredge_r7615Range<1.7.2

dell_technologies poweredge_r6625Range<1.7.2

dell_technologies poweredge_r7625Range<1.7.2

dell_technologies poweredge_c6615Range<1.2.3

dell_technologies poweredge_r650Range<1.13.2

dell_technologies poweredge_r750Range<1.13.2

dell_technologies poweredge_r750xaRange<1.13.2

dell_technologies poweredge_c6520Range<1.13.2

dell_technologies poweredge_mx750cRange<1.13.2

dell_technologies poweredge_r550Range<1.13.2

dell_technologies poweredge_r450Range<1.13.2

dell_technologies poweredge_r650xsRange<1.13.2

dell_technologies poweredge_r750xsRange<1.13.2

dell_technologies poweredge_t550Range<1.13.2

dell_technologies poweredge_xr11Range<1.13.2

dell_technologies poweredge_xr12Range<1.13.2

dell_technologies poweredge_xr4510cRange<1.14.1

dell_technologies poweredge_xr4520cRange<1.14.1

dell_technologies poweredge_t150Range<1.9.1

dell_technologies poweredge_t350Range<1.9.1

dell_technologies poweredge_r250Range<1.9.1

dell_technologies poweredge_r350Range<1.9.1

dell_technologies poweredge_r6515Range<2.14.1

dell_technologies poweredge_r6525Range<2.14.1

dell_technologies poweredge_r7515Range<2.14.1

dell_technologies poweredge_r7525Range<2.14.1

dell_technologies poweredge_c6525Range<2.14.1

dell_technologies poweredge_xe8545Range<2.14.1

dell_technologies xc_core_xc660Range<2.0.0

dell_technologies xc_core_xc760Range<2.0.0

dell_technologies xc_core_xc7625Range<1.7.2

dell_technologies emc_xc_core_xc450Range<1.13.2

dell_technologies emc_xc_core_xc650Range<1.13.2

dell_technologies emc_xc_core_xc750Range<1.13.2

dell_technologies emc_xc_core_xc750xaRange<1.13.2

dell_technologies emc_xc_core_xc6520Range<1.13.2

dell_technologies emc_xc_core_xc7525Range<2.14.1

Source	Link
dell	www.dell.com/support/kbdoc/en-us/000222812/dsa-2024-004-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability
web	www.web.nvd.nist.gov/view/vuln/detail

20 Mar 2024 00:00Current

6Medium risk

Vulners AI Score6

CVSS 23.5

CVSS 35.3

EPSS0.00151