DSA-2024-037: Security Update for Dell Precision Rack BIOS for an Improper Input Validation Vulnerability
Résumé: Dell Precision Rack BIOS remediation is available for an Improper Input Validation vulnerability that could be exploited by malicious users to compromise the affected systems.
Cet article concerne
Cet article ne concerne pas
Cet article n’est associé à aucun produit spécifique.
Toutes les versions du produit ne sont pas identifiées dans cet article.
Impact
High
Détails
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-0161 | Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM. | 7.5 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-0161 | Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM. | 7.5 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
Produits concernés et mesure corrective
| Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
BIOS Release Date |
Link |
|---|---|---|---|---|---|
| Precision 7920 Rack |
BIOS |
Versions 2.21.2 prior to |
Versions 2.21.2 or later |
03/12/2024 |
|
| 7920 XL Rack |
BIOS |
Versions 2.21.2 prior to |
Versions 2.21.2 or later |
03/12/2024 |
| Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
BIOS Release Date |
Link |
|---|---|---|---|---|---|
| Precision 7920 Rack |
BIOS |
Versions 2.21.2 prior to |
Versions 2.21.2 or later |
03/12/2024 |
|
| 7920 XL Rack |
BIOS |
Versions 2.21.2 prior to |
Versions 2.21.2 or later |
03/12/2024 |
Historique des révisions
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-03-13 | Initial Release |
Informations connexes
Mention légale
Produits concernés
7920 XL Rack, Precision 7920 RackPropriétés de l’article
Numéro d’article: 000222319
Type d’article: Dell Security Advisory
Dernière modification: 13 mars 2024
Trouvez des réponses à vos questions auprès d’autres utilisateurs Dell
Services de support
Vérifiez si votre appareil est couvert par les services de support.