PT-2024-21234 · Dell · Dell Poweredge Server Bios

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Description: The issue is related to an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability,...

CVE-2024-0162

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM...

Design/Logic Flaw

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM...

CVE-2024-0173

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory...

CVE-2024-0173

CVE-2024-0173 concerns Dell PowerEdge Server BIOS and Dell Precision Rack BIOS, where an improper parameter initialization vulnerability could allow a local, low-privilege attacker to read contents of non-SMM stack memory. Affected firmware is BIOS-level, with exploitation requiring local access ...

CVE-2024-0154

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory...

CVE-2024-0162

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are affected by an Improper SMM communication buffer verification vulnerability that enables out-of-bounds reads/writes to SMRAM via a local, low-privilege attacker. Affected components are the BIOS implementations for Dell PowerEdge Server ...

CVE-2024-0162

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM...

CVE-2024-0162

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM...

CVE-2024-0161

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM...

CVE-2024-0161

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM...

CVE-2024-0161

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are affected by an improper SMM communication buffer verification vulnerability, enabling a local, low-privileged attacker to potentially perform arbitrary writes to SMRAM. The issue stems from a faulty SMM buffer validation in the BIOS/firm...

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS Security Vulnerability

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. A security vulnerability exists...

CVE-2023-20577

A vulnerability was found in AMD hardware due to a heap overflow in the SMM module. This issue could allow a local unauthenticated attacker to enable writing to SPI flash to execute arbitrary code. Mitigation Mitigation for this issue is either not available or the currently available options do...

CVE-2023-20587

CVE-2023-20587 describes improper access control in System Management Mode (SMM) that may allow a local attacker to access the SPI flash and potentially execute arbitrary code. The vulnerability is discussed across multiple sources: AMD’s AMD-SB-7009 bulletin references SMM-related CVEs including...

CVE-2023-20587

Improper Access Control in System Management Mode SMM may allow an attacker access to the SPI flash potentially leading to arbitrary code execution...

CVE-2023-31035

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and informatio...

CVE-2023-31035 CVE

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and informatio...

CVE-2023-31035 CVE

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and informatio...

SUSE SLES15 Security Update : kernel-firmware (SUSE-SU-2023:4665-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4665-1 advisory. Update AMD ucode to 20231030 bsc1215831: - CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attack...