DSA-2024-167: Security Update for Dell PowerEdge T30/T40 Mini Tower Server for an Improper Input Validation Vulnerability
Zusammenfassung: Dell PowerEdge T30/T40 Mini Tower Server remediation is available for an Improper Input Validation vulnerability that could be exploited by malicious users to compromise the affected systems. ...
Dieser Artikel gilt für
Dieser Artikel gilt nicht für
Dieser Artikel ist nicht an ein bestimmtes Produkt gebunden.
In diesem Artikel werden nicht alle Produktversionen aufgeführt.
Auswirkungen
Medium
Details
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-0158 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges. | 5.1 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-0158 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges. | 5.1 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L |
Betroffene Produkte und Korrektur
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| PowerEdge T30 | BIOS | Versions prior to 1.15.0 | Version 1.15.0 or later | https://www.dell.com/support/home/product-support/product/poweredge-t30/drivers |
| PowerEdge T40 | BIOS | Versions prior to 1.16.0 | Version 1.16.0 or later | https://www.dell.com/support/home/product-support/product/poweredge-t40/drivers |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| PowerEdge T30 | BIOS | Versions prior to 1.15.0 | Version 1.15.0 or later | https://www.dell.com/support/home/product-support/product/poweredge-t30/drivers |
| PowerEdge T40 | BIOS | Versions prior to 1.16.0 | Version 1.16.0 or later | https://www.dell.com/support/home/product-support/product/poweredge-t40/drivers |
Workarounds und Korrekturmaßnahmen
None
Revisionsverlauf
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-04-09 | Initial release |
| 2.0 | 2024-05-22 | Added the downloadable link for PowerEdge T30 |
| 3.0 | 2024-06-13 | Updated for enhanced presentation with no changes to content |
| 4.0 | 2024-11-08 | Updated for enhanced presentation with no changes to content |
Zugehörige Informationen
Rechtlicher Hinweis
Betroffene Produkte
PowerEdge T30, PowerEdge T40Artikeleigenschaften
Artikelnummer: 000223962
Artikeltyp: Dell Security Advisory
Zuletzt geändert: 08 Nov. 2024
Antworten auf Ihre Fragen erhalten Sie von anderen Dell NutzerInnen
Support Services
Prüfen Sie, ob Ihr Gerät durch Support Services abgedeckt ist.