> CVE-2024-0161 [HIGH]

« BACK_TO_HOME
PUBLISHED
2024-03-13 16:15
MODIFIED
2025-02-04 17:29
CVSS_SCORE V3
7.2
EPSS (Prob. Exploit)
0.20%
Top 89.6%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08

> DESCRIPTION

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.

> AFFECTED_PRODUCTS

Dell - Poweredge R640 Firmware
< 2.21.2
Dell - Poweredge R740 Firmware
< 2.21.2
Dell - Poweredge R740xd Firmware
< 2.21.2
Dell - Poweredge R940 Firmware
< 2.21.2
Dell - Poweredge R840 Firmware
< 2.21.0
Dell - Poweredge R940xa Firmware
< 2.21.0
Dell - Poweredge Mx740c Firmware
< 2.21.0
Dell - Poweredge Mx840c Firmware
< 2.21.0
Dell - Poweredge T640 Firmware
< 2.21.0
Dell - Poweredge R540 Firmware
< 2.21.1
Dell - Poweredge R440 Firmware
< 2.21.1
Dell - Poweredge T440 Firmware
< 2.21.1
Dell - Poweredge Xr2 Firmware
< 2.21.1
Dell - Poweredge R740xd2 Firmware
< 2.21.1
Dell - Poweredge C6420 Firmware
< 2.21.0
Dell - Poweredge Fc640 Firmware
< 2.21.0
Dell - Poweredge M640 Firmware
< 2.21.0
Dell - Poweredge C4140 Firmware
< 2.21.1
Dell - Dss 8440 Firmware
< 2.21.0
Dell - Poweredge Xe2420 Firmware
< 2.21.1
Dell - Poweredge Xe7420 Firmware
< 2.21.0
Dell - Poweredge Xe7440 Firmware
< 2.21.0
Dell - Emc Storage Nx3240 Firmware
< 2.21.2
Dell - Emc Storage Nx3340 Firmware
< 2.21.2
Dell - Emc Xc Core 6420 Firmware
< 2.21.0
Dell - Emc Xc Core Xc640 Firmware
< 2.21.2
Dell - Emc Xc Core Xc740xd Firmware
< 2.21.2
Dell - Emc Xc Core Xc740xd2 Firmware
< 2.21.1
Dell - Emc Xc Core Xc940 Firmware
< 2.21.2
Dell - Emc Xc Core Xcxr2 Firmware
< 2.21.1
Dell - Poweredge R650 Firmware
< 1.13.2
Dell - Poweredge R750 Firmware
< 1.13.2
Dell - Poweredge R750xa Firmware
< 1.13.2
Dell - Poweredge C6520 Firmware
< 1.13.2
Dell - Poweredge Mx750c Firmware
< 1.13.2
Dell - Poweredge R550 Firmware
< 1.13.2
Dell - Poweredge R450 Firmware
< 1.13.2
Dell - Poweredge R650xs Firmware
< 1.13.2
Dell - Poweredge R750xs Firmware
< 1.13.2
Dell - Poweredge T550 Firmware
< 1.13.2
Dell - Poweredge Xr11 Firmware
< 1.13.2
Dell - Poweredge Xr12 Firmware
< 1.13.2
Dell - Poweredge T150 Firmware
< 1.9.1
Dell - Poweredge T350 Firmware
< 1.9.1
Dell - Poweredge R250 Firmware
< 1.9.1
Dell - Poweredge R350 Firmware
< 1.9.1
Dell - Poweredge Xr4510c Firmware
< 1.14.1
Dell - Poweredge Xr4520c Firmware
< 1.14.1
Dell - Emc Xc Core Xc450 Firmware
< 1.13.2
Dell - Emc Xc Core Xc650 Firmware
< 1.13.2
Dell - Emc Xc Core Xc750 Firmware
< 1.13.2
Dell - Emc Xc Core Xc750xa Firmware
< 1.13.2
Dell - Emc Xc Core Xc6520 Firmware
< 1.13.2
Dell - Poweredge R930 Firmware
< 2.14.0
Dell - Poweredge R730 Firmware
< 2.19.0
Dell - Poweredge R730xd Firmware
< 2.19.0
Dell - Poweredge R630 Firmware
< 2.19.0
Dell - Poweredge C4130 Firmware
< 2.19.0
Dell - Poweredge M630 Firmware
< 2.19.0
Dell - Poweredge Fc630 Firmware
< 2.19.0
Dell - Poweredge Fc430 Firmware
< 2.19.0
Dell - Poweredge M830 Firmware
< 2.19.0
Dell - Poweredge Fc830 Firmware
< 2.19.0
Dell - Poweredge T630 Firmware
< 2.19.0
Dell - Poweredge R530 Firmware
< 2.19.0
Dell - Poweredge R430 Firmware
< 2.19.0
Dell - Poweredge T430 Firmware
< 2.19.0
Dell - Poweredge C6320 Firmware
< 2.19.0
Dell - Poweredge T130 Firmware
< 2.20.0
Dell - Poweredge R230 Firmware
< 2.20.0
Dell - Poweredge T330 Firmware
< 2.20.0
Dell - Poweredge R330 Firmware
< 2.20.0
Dell - Poweredge R830 Firmware
< 1.19.0
Dell - Poweredge M640 \(pe Vrtx\) Firmware
< 2.21.0
Dell - Poweredge M630 \(pe Vrtx\) Firmware
< 2.19.0
Dell - Poweredge M830 \(pe Vrtx\) Firmware
< 2.19.0
Dell - Poweredge T360 Firmware
< 1.1.1
Dell - Poweredge R360 Firmware
< 1.1.1
Dell - Storage Nx3230 Firmware
< 2.19.0
Dell - Storage Nx3330 Firmware
< 2.19.0
Dell - Storage Nx430 Firmware
< 2.20.0
Dell - Xc6320 Firmware
< 2.19.0
Dell - Xc430 Firmware
< 2.19.0
Dell - Xc630 Firmware
< 2.19.0
Dell - Xc730 Firmware
< 2.19.0
Dell - Xc730xd Firmware
< 2.19.0

> CVSS V3 METRICS

CVSS_VECTOR
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H

> MÉTRIQUES CVSS DÉTAILLÉES

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H
Métrique Valeur Interprétation
AV (Vecteur d'Attaque)
Attack Vector
Local (L)
Exploit nécessite un accès local au système
AC (Complexité d'Attaque)
Attack Complexity
High (H)
Conditions spécifiques doivent être réunies pour exploiter
PR (Privilèges Requis)
Privileges Required
High (H)
Authentifié avec privilèges administratifs
UI (Interaction Utilisateur)
User Interaction
None (N)
Aucune interaction utilisateur nécessaire
S (Périmètre)
Scope
Changed (C)
Impact s'étend au-delà du composant compromis
C (Impact Confidentialité)
Confidentiality Impact
None (N)
Aucune divulgation d'informations
I (Impact Intégrité)
Integrity Impact
High (H)
Modification totale des données possible
A (Impact Disponibilité)
Availability Impact
High (H)
Interruption totale du service possible

> RÉSUMÉ DES IMPACTS

Confidentialité
None
Aucune divulgation d'informations
Intégrité
High
Modification totale des données possible
Disponibilité
High
Interruption totale du service possible

> HISTORIQUE DES MODIFICATIONS

Première apparition
13/03/2024 16:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 14:48
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME