CVE-2023-25537

🗓️ 22 May 2023 10:48:45Reported by dellType

Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-25537	22 May 202314:25	–	circl
CNNVD	Dell PowerEdge Server BIOS 缓冲区错误漏洞	22 May 202300:00	–	cnnvd
Cvelist	CVE-2023-25537	22 May 202310:48	–	cvelist
EUVD	EUVD-2023-29489	3 Oct 202520:07	–	euvd
NVD	CVE-2023-25537	22 May 202311:15	–	nvd
OSV	CVE-2023-25537	22 May 202311:15	–	osv
Prion	Privilege escalation	22 May 202311:15	–	prion
Positive Technologies	PT-2023-8776 · Dell · Dell Precision Bios +1	22 May 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-25537	22 May 202310:48	–	vulnrichment

NVD

Vulners

Node

dell poweredge_r740_firmwareRange<2.18.1

AND

dell poweredge_r740Match-

Node

dell poweredge_r740xd_firmwareRange<2.18.1

AND

dell poweredge_r740xdMatch-

Node

dell poweredge_r640_firmwareRange<2.18.1

AND

dell poweredge_r640Match-

Node

dell poweredge_r940_firmwareRange<2.18.1

AND

dell poweredge_r940Match-

Node

dell poweredge_r540_firmwareRange<2.18.1

AND

dell poweredge_r540Match-

Node

dell poweredge_r440_firmwareRange<2.18.1

AND

dell poweredge_r440Match-

Node

dell poweredge_t440_firmwareRange<2.18.1

AND

dell poweredge_t440Match-

Node

dell poweredge_xr2_firmwareRange<2.18.1

AND

dell poweredge_xr2Match-

Node

dell poweredge_r740xd2_firmwareRange<2.18.1

AND

dell poweredge_r740xd2Match-

Node

dell poweredge_r840_firmwareRange<2.18.1

AND

dell poweredge_r840Match-

Node

dell poweredge_r940xa_firmwareRange<2.18.1

AND

dell poweredge_r940xaMatch-

Node

dell poweredge_t640_firmwareRange<2.18.1

AND

dell poweredge_t640Match-

Node

dell poweredge_c6420_firmwareRange<2.18.1

AND

dell poweredge_c6420Match-

Node

dell poweredge_fc640_firmwareRange<2.18.1

AND

dell poweredge_fc640Match-

Node

dell poweredge_m640_firmwareRange<2.18.1

AND

dell poweredge_m640Match-

Node

dell poweredge_mx740c_firmwareRange<2.18.1

AND

dell poweredge_mx740cMatch-

Node

dell poweredge_mx840c_firmwareRange<2.18.1

AND

dell poweredge_mx840cMatch-

Node

dell poweredge_c4140_firmwareRange<2.18.1

AND

dell poweredge_c4140Match-

Node

dell dss_8440_firmwareRange<2.18.1

AND

dell dss_8440Match-

Node

dell poweredge_xe2420_firmwareRange<2.18.1

AND

dell poweredge_xe2420Match-

Node

dell poweredge_xe7420_firmwareRange<2.18.1

AND

dell poweredge_xe7420Match-

Node

dell poweredge_xe7440_firmwareRange<2.18.1

AND

dell poweredge_xe7440Match-

Node

dell emc_storage_nx3240_firmwareRange<2.18.1

AND

dell emc_storage_nx3240Match-

Node

dell emc_storage_nx3340_firmwareRange<2.18.1

AND

dell emc_storage_nx3340Match-

Node

dell emc_xc_core_6420_firmwareRange<2.18.1

AND

dell emc_xc_core_6420Match-

Node

dell emc_xc_core_xc640_firmwareRange<2.18.1

AND

dell emc_xc_core_xc640Match-

Node

dell emc_xc_core_xc740xd_firmwareRange<2.18.1

AND

dell emc_xc_core_xc740xdMatch-

Node

dell emc_xc_core_xc740xd2_firmwareRange<2.18.1

AND

dell emc_xc_core_xc740xd2Match-

Node

dell emc_xc_core_xc940_firmwareRange<2.18.1

AND

dell emc_xc_core_xc940Match-

Node

dell emc_xc_core_xcxr2_firmwareRange<2.18.1

AND

dell emc_xc_core_xcxr2Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "BIOS",
      "PowerEdge R740",
      "PowerEdge R740XD",
      "PowerEdge R640",
      "PowerEdge R940",
      "PowerEdge R540",
      "PowerEdge R440",
      "PowerEdge T440",
      "PowerEdge XR2",
      "PowerEdge R740xD2",
      "PowerEdge R840",
      "PowerEdge R940xa",
      "PowerEdge T640",
      "PowerEdge C6420",
      "PowerEdge FC640",
      "PowerEdge M640",
      "PowerEdge M640 (for PE VRTX)",
      "PowerEdge MX740c",
      "PowerEdge MX840c",
      "PowerEdge C4140",
      "DSS 8440",
      "PowerEdge XE2420",
      "PowerEdge XE7420",
      "PowerEdge XE7440",
      "Dell EMC Storage NX3240",
      "Dell EMC Storage NX3340",
      "Dell EMC XC Core 6420 System",
      "Dell EMC XC Core XC640 System",
      "Dell EMC XC Core XC740xd System",
      "Dell EMC XC Core XC740xd2",
      "Dell EMC XC Core XC940 System",
      "Dell EMC XC Core XCXR2"
    ],
    "product": "PowerEdge Platform",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to 2.18.1 "
      }
    ]
  }
]

Source	Link
dell	www.dell.com/support/kbdoc/en-us/000213550/dsa-2023-098-security-update-for-dell-poweredge-14g-server-bios-for-an-out-of-bounds-write-vulnerability

21 Nov 2024 07:49Current

7.9High risk

Vulners AI Score7.9

CVSS 3.16.1 - 7.8

EPSS0.00049

SSVC

CWE-787