Design/Logic Flaw

2023-02-1020:15:00

PRIOn knowledge base

www.prio-n.com

dell poweredge

dell precision

smm communication

arbitrary code execution

denial of service

nvd

0.0004 Low

EPSS

Percentile

5.1%

JSON

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.

CPENameOperatorVersion
c4130_firmwarelt2.16.0
c4140_firmwarelt2.16.1
c6320_firmwarelt2.16.0
c6420_firmwarelt2.16.1
c6520_firmwarelt1.8.2
dss8440_firmwarelt2.16.1
fc430_firmwarelt2.16.0
fc630_firmwarelt2.16.0
fc640_firmwarelt2.16.1
fc830_firmwarelt2.16.0

Name	Operator	Version
c4130_firmware	lt	2.16.0
c4140_firmware	lt	2.16.1
c6320_firmware	lt	2.16.0
c6420_firmware	lt	2.16.1
c6520_firmware	lt	1.8.2
dss8440_firmware	lt	2.16.1
fc430_firmware	lt	2.16.0
fc630_firmware	lt	2.16.0
fc640_firmware	lt	2.16.1
fc830_firmware	lt	2.16.0