DSA-2025-299: Security Update for Dell PowerEdge Server BIOS for an Access of Memory Location After End of Buffer Vulnerability
Riepilogo: Dell PowerEdge Server BIOS remediation is available for an Access of Memory Location After End of Buffer vulnerability that could be exploited by malicious users to compromise the affected system. ...
Questo articolo si applica a
Questo articolo non si applica a
Questo articolo non è legato a un prodotto specifico.
Non tutte le versioni del prodotto sono identificate in questo articolo.
Impatto
Low
Dettagli
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-36581 |
Dell PowerEdge Platform version(s) 14G AMD BIOS v1.25.0 and prior, contain(s) an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. |
3.8 |
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-36581 |
Dell PowerEdge Platform version(s) 14G AMD BIOS v1.25.0 and prior, contain(s) an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. |
3.8 |
Prodotti interessati e correzione
|
Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Link |
|
PowerEdge R6415 |
BIOS |
Versions prior to 1.26.0 |
Version 1.26.0 or later |
https://www.dell.com/support/product-details/product/poweredge-r6415/drivers |
|
PowerEdge R7415 |
BIOS |
Versions prior to 1.26.0 |
Version 1.26.0 or later |
https://www.dell.com/support/product-details/product/poweredge-r7415/drivers |
|
PowerEdge R7425 |
BIOS |
Versions prior to 1.26.0 |
Version 1.26.0 or later |
https://www.dell.com/support/product-details/product/poweredge-r7425/drivers |
|
Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Link |
|
PowerEdge R6415 |
BIOS |
Versions prior to 1.26.0 |
Version 1.26.0 or later |
https://www.dell.com/support/product-details/product/poweredge-r6415/drivers |
|
PowerEdge R7415 |
BIOS |
Versions prior to 1.26.0 |
Version 1.26.0 or later |
https://www.dell.com/support/product-details/product/poweredge-r7415/drivers |
|
PowerEdge R7425 |
BIOS |
Versions prior to 1.26.0 |
Version 1.26.0 or later |
https://www.dell.com/support/product-details/product/poweredge-r7425/drivers |
The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Cronologia delle revisioni
|
Revision |
Date |
Description |
|
1.0 |
2025-08-13 |
Initial release |
Ringraziamenti
Dell would like to thank codebreaker1337 for reporting this issue.
Informazioni correlate
Dichiarazione di non responsabilità
Prodotti interessati
PowerEdge R6415, PowerEdge R7415, PowerEdge R7425Proprietà dell'articolo
Numero articolo: 000356405
Tipo di articolo: Dell Security Advisory
Ultima modifica: 13 ago 2025
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.