DSA-2024-167: Security Update for Dell PowerEdge T30/T40 Mini Tower Server for an Improper Input Validation Vulnerability
Summary: Dell PowerEdge T30/T40 Mini Tower Server remediation is available for an Improper Input Validation vulnerability that could be exploited by malicious users to compromise the affected systems. ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Medium
Details
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-0158 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges. | 5.1 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-0158 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges. | 5.1 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L |
Affected Products & Remediation
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| PowerEdge T30 | BIOS | Versions prior to 1.15.0 | Version 1.15.0 or later | https://www.dell.com/support/home/product-support/product/poweredge-t30/drivers |
| PowerEdge T40 | BIOS | Versions prior to 1.16.0 | Version 1.16.0 or later | https://www.dell.com/support/home/product-support/product/poweredge-t40/drivers |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| PowerEdge T30 | BIOS | Versions prior to 1.15.0 | Version 1.15.0 or later | https://www.dell.com/support/home/product-support/product/poweredge-t30/drivers |
| PowerEdge T40 | BIOS | Versions prior to 1.16.0 | Version 1.16.0 or later | https://www.dell.com/support/home/product-support/product/poweredge-t40/drivers |
Workarounds & Mitigations
None
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-04-09 | Initial release |
| 2.0 | 2024-05-22 | Added the downloadable link for PowerEdge T30 |
| 3.0 | 2024-06-13 | Updated for enhanced presentation with no changes to content |
| 4.0 | 2024-11-08 | Updated for enhanced presentation with no changes to content |
Related Information
Legal Disclaimer
Affected Products
PowerEdge T30, PowerEdge T40Article Properties
Article Number: 000223962
Article Type: Dell Security Advisory
Last Modified: 08 Nov 2024
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.