9 matches found
CVE-2024-0172
CVE-2024-0172 affects Dell PowerEdge Server BIOS and Dell Precision Rack BIOS. The vulnerability is due to improper privilege management, enabling an unauthenticated local attacker to achieve privilege escalation. Affected component is the BIOS, with exploitability local and high impact on confid...
CVE-2025-26482
CVE-2025-26482 affects Dell PowerEdge Server BIOS and Dell iDRAC9 (all versions). The vulnerability is described as an Information Disclosure flaw that could be exploited by a remote attacker with high privileges and network access; impact is confidentiality loss with no integrity/availability im...
CVE-2024-0173
CVE-2024-0173 concerns Dell PowerEdge Server BIOS and Dell Precision Rack BIOS, where an improper parameter initialization vulnerability could allow a local, low-privilege attacker to read contents of non-SMM stack memory. Affected firmware is BIOS-level, with exploitation requiring local access ...
CVE-2023-32460
Dell PowerEdge BIOS contains an improper privilege management vulnerability that could allow an unauthenticated, local attacker to escalate privileges. Affected component: Dell PowerEdge Server BIOS. Root cause: improper privilege management within BIOS code (vendor-implied). Impact: local privil...
CVE-2024-38304
CVE-2024-38304 affects Dell PowerEdge Platform, 14G Intel BIOS versions prior to 2.22.x. The vulnerability is an Access of Memory Location After End of Buffer, caused by writing beyond the end of a buffer in memory, which could enable a low-privilege attacker with local access to cause informatio...
CVE-2024-38303
Dell PowerEdge Platform, 14G Intel BIOS versions prior to 2.22.x, contains an Improper Input Validation vulnerability that could allow a high-privilege local attacker to cause information disclosure. Affected component is the BIOS/input handling within Dell PowerEdge BIOS prior to 2.22.x. The roo...
CVE-2024-0161
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are affected by an improper SMM communication buffer verification vulnerability, enabling a local, low-privileged attacker to potentially perform arbitrary writes to SMRAM. The issue stems from a faulty SMM buffer validation in the BIOS/firm...
CVE-2024-0154
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are affected by an improper parameter initialization vulnerability that could allow a local low-privilege attacker to read non-SMM stack memory. Affected components are BIOS-level code for Dell PowerEdge Server BIOS and Dell Precision Rack B...