DSA-2024-037: Security Update for Dell Precision Rack BIOS for an Improper Input Validation Vulnerability
Resumen: Dell Precision Rack BIOS remediation is available for an Improper Input Validation vulnerability that could be exploited by malicious users to compromise the affected systems.
Este artículo se aplica a
Este artículo no se aplica a
Este artículo no está vinculado a ningún producto específico.
No se identifican todas las versiones del producto en este artículo.
Impacto
High
Detalles
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-0161 | Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM. | 7.5 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-0161 | Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM. | 7.5 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
Corrección y productos afectados
| Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
BIOS Release Date |
Link |
|---|---|---|---|---|---|
| Precision 7920 Rack |
BIOS |
Versions 2.21.2 prior to |
Versions 2.21.2 or later |
03/12/2024 |
|
| 7920 XL Rack |
BIOS |
Versions 2.21.2 prior to |
Versions 2.21.2 or later |
03/12/2024 |
| Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
BIOS Release Date |
Link |
|---|---|---|---|---|---|
| Precision 7920 Rack |
BIOS |
Versions 2.21.2 prior to |
Versions 2.21.2 or later |
03/12/2024 |
|
| 7920 XL Rack |
BIOS |
Versions 2.21.2 prior to |
Versions 2.21.2 or later |
03/12/2024 |
Historial de revisiones
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-03-13 | Initial Release |
Información relacionada
Descargo de responsabilidad
Productos afectados
7920 XL Rack, Precision 7920 RackPropiedades del artículo
Número del artículo: 000222319
Tipo de artículo: Dell Security Advisory
Última modificación: 13 mar 2024
Encuentre respuestas a sus preguntas de otros usuarios de Dell
Servicios de soporte
Compruebe si el dispositivo está cubierto por los servicios de soporte.