DSA-2024-309: Aggiornamento della sicurezza per il server Dell PowerEdge per la vulnerabilità di convalida impropria degli input
Summary: È disponibile la correzione del server Dell PowerEdge per la vulnerabilità di convalida impropria degli input che utenti malintenzionati potrebbero sfruttare per compromettere i sistemi interessati. ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Medium
Details
| CVEs codice proprietario | Descrizione | Punteggio base CVSS | Stringa vettoriale CVSS |
|---|---|---|---|
| CVE-2024-38303 | La piattaforma Dell PowerEdge, versione(i) del BIOS Intel 14G precedente alla 2.22.x, contiene una vulnerabilità di convalida impropria dell'input. Un utente malintenzionato dotato di privilegi elevati con accesso locale potrebbe sfruttare questa vulnerabilità, causando la divulgazione di informazioni. | 5.3 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N |
| CVEs codice proprietario | Descrizione | Punteggio base CVSS | Stringa vettoriale CVSS |
|---|---|---|---|
| CVE-2024-38303 | La piattaforma Dell PowerEdge, versione(i) del BIOS Intel 14G precedente alla 2.22.x, contiene una vulnerabilità di convalida impropria dell'input. Un utente malintenzionato dotato di privilegi elevati con accesso locale potrebbe sfruttare questa vulnerabilità, causando la divulgazione di informazioni. | 5.3 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N |
Affected Products & Remediation
|
Prodotto |
Software/firmware |
Versioni interessate |
Versioni corrette |
Link |
|
PowerEdge R740 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r740/drivers |
|
PowerEdge R740XD |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r740xd/drivers |
|
PowerEdge R640 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r640/drivers |
|
PowerEdge R940 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r940/drivers |
|
PowerEdge R540 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r540/drivers |
|
PowerEdge R440 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r440/drivers |
|
PowerEdge T440 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-t440/drivers |
|
PowerEdge XR2 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/oth-r440-xr/drivers |
|
PowerEdge R740XD2 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r740xd2/drivers |
|
PowerEdge R840 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/homeproduct-support/product/poweredge-r840/drivers |
|
PowerEdge R940XA |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r940xa/drivers |
|
PowerEdge T640 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-t640/drivers |
|
PowerEdge C6420 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-c6420/drivers |
|
PowerEdge FC640 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-fc640/drivers |
|
PowerEdge M640 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-m640/drivers |
|
PowerEdge M640 (per PE VRTX) |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-m640p/drivers |
|
PowerEdge MX740C |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-mx740c/drivers |
|
PowerEdge MX840C |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-mx840c/drivers |
|
PowerEdge C4140 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-c4140/drivers |
|
DSS 8440 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/dell-dss-8440/drivers |
|
PowerEdge XE2420 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-xe2420/drivers |
|
PowerEdge XE7420 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-xe7420/drivers |
|
PowerEdge XE7440 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-xe7440/drivers |
|
Dell EMC Storage NX3240 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/storage-nx3240/drivers |
|
Dell EMC Storage NX3340 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/storage-nx3340/drivers |
|
Sistema Dell EMC XC Core 6420 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/dell-xc6420-ent-xc/drivers |
|
Sistema Dell EMC XC Core XC640 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/dell-xc640-ent-xc/drivers |
|
Sistema Dell EMC XC Core XC740xd |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/dell-xc740xd-ent-xc/drivers |
|
Dell EMC XC Core XC740xd2 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/dell-emc-xc740-xd2/drivers |
|
Sistema Dell EMC XC Core XC940 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/dell-xc940-ent-xc/drivers |
|
Dell EMC XC Core XCXR2 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/dell-emc-xc-core-xcxr2/drivers |
|
Prodotto |
Software/firmware |
Versioni interessate |
Versioni corrette |
Link |
|
PowerEdge R740 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r740/drivers |
|
PowerEdge R740XD |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r740xd/drivers |
|
PowerEdge R640 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r640/drivers |
|
PowerEdge R940 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r940/drivers |
|
PowerEdge R540 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r540/drivers |
|
PowerEdge R440 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r440/drivers |
|
PowerEdge T440 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-t440/drivers |
|
PowerEdge XR2 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/oth-r440-xr/drivers |
|
PowerEdge R740XD2 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r740xd2/drivers |
|
PowerEdge R840 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/homeproduct-support/product/poweredge-r840/drivers |
|
PowerEdge R940XA |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-r940xa/drivers |
|
PowerEdge T640 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-t640/drivers |
|
PowerEdge C6420 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-c6420/drivers |
|
PowerEdge FC640 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-fc640/drivers |
|
PowerEdge M640 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-m640/drivers |
|
PowerEdge M640 (per PE VRTX) |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-m640p/drivers |
|
PowerEdge MX740C |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-mx740c/drivers |
|
PowerEdge MX840C |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-mx840c/drivers |
|
PowerEdge C4140 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-c4140/drivers |
|
DSS 8440 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/dell-dss-8440/drivers |
|
PowerEdge XE2420 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-xe2420/drivers |
|
PowerEdge XE7420 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-xe7420/drivers |
|
PowerEdge XE7440 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/poweredge-xe7440/drivers |
|
Dell EMC Storage NX3240 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/storage-nx3240/drivers |
|
Dell EMC Storage NX3340 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/storage-nx3340/drivers |
|
Sistema Dell EMC XC Core 6420 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/dell-xc6420-ent-xc/drivers |
|
Sistema Dell EMC XC Core XC640 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/dell-xc640-ent-xc/drivers |
|
Sistema Dell EMC XC Core XC740xd |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/dell-xc740xd-ent-xc/drivers |
|
Dell EMC XC Core XC740xd2 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/dell-emc-xc740-xd2/drivers |
|
Sistema Dell EMC XC Core XC940 |
BIOS |
Versioni precedenti a 2.22.2 |
Versione 2.22.2 o successiva |
https://www.dell.com/support/home/product-support/product/dell-xc940-ent-xc/drivers |
|
Dell EMC XC Core XCXR2 |
BIOS |
Versioni precedenti a 2.22.1 |
Versione 2.22.1 o successiva |
https://www.dell.com/support/home/product-support/product/dell-emc-xc-core-xcxr2/drivers |
- La tabella sui prodotti interessati e sulle correzioni riportata sopra potrebbe non essere un elenco completo di tutte le versioni supportate interessate e potrebbe essere aggiornata man mano che saranno disponibili ulteriori informazioni.
- A causa di aggiornamenti per risolvere un problema funzionale, le precedenti versioni del BIOS per le piattaforme PowerEdge 14G sono state sostituite dalle versioni aggiornate. Dell consiglia a tutti i clienti di eseguire l'aggiornamento alle versioni del BIOS disponibili.
Revision History
| Revisione | Data | Descrizione |
|---|---|---|
| 1.0 | 2024-08-28 | Versione iniziale |
| 2.0 | 2024-09-10 |
|
| 3.0 | 2024-10-11 |
|
| 4.0 | 2024-11-01 | Modifica della formattazione senza aggiornamento del contenuto. |
| 5.0 | 2024-11-12 | Modifica della formattazione senza aggiornamento del contenuto. |
Acknowledgements
Dell ringrazia codebreaker1337 per aver segnalato questo problema.
Related Information
Legal Disclaimer
Affected Products
DSS 8440, Dell EMC XC Core XCXR2, Dell EMC XC Core XC740xd2, Dell EMC XC Core XC640 System, Dell EMC XC Core 6420 System, Dell EMC XC Core XC740xd System, Dell EMC XC Core XC940 System, PowerEdge XR2, Poweredge C4140, PowerEdge C6420, PowerEdge FC640
, PowerEdge M640, PowerEdge M640 (for PE VRTX), PowerEdge MX740C, PowerEdge MX840C, PowerEdge R440, PowerEdge R540, PowerEdge R640, PowerEdge R740, PowerEdge R740XD, PowerEdge R740XD2, PowerEdge R840, PowerEdge R940, PowerEdge R940xa, PowerEdge T440, PowerEdge T640, PowerEdge XE2420, PowerEdge XE7420, PowerEdge XE7440, Dell EMC Storage NX3240, Dell EMC Storage NX3340
...
Article Properties
Article Number: 000228135
Article Type: Dell Security Advisory
Last Modified: 18 Nov 2024
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.