Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-14756
HistoryMar 18, 2024 - 12:00 a.m.

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS Input Validation Error Vulnerability

2024-03-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
dell inc products
bios update
buffer validation
communication vulnerability
smram

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. An input validation error vulnerability exists in the Dell PowerEdge Server BIOS and Dell Precision Rack BIOS, which stems from a communication buffer validation vulnerability that contains incorrect SMM. A local, low-privilege attacker could exploit this vulnerability to cause arbitrary writes to SMRAM.

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%

Related for CNVD-2024-14756