DSA-2023-167: Precision 7920 Rack and 7920 XL Rack Security Update for an Out of Bounds Write Vulnerability
Samenvatting: Precision 7920 Rack and 7920 XL Rack remediation are available for an Out of Bounds Write vulnerability that may be exploited by malicious users to compromise the affected system.
Dit artikel is van toepassing op
Dit artikel is niet van toepassing op
Dit artikel is niet gebonden aan een specifiek product.
Niet alle productversies worden in dit artikel vermeld.
Impact
Medium
Gegevens
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-25537 | Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege. | 6.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H See NVD (http://nvd.nist.gov/ ) forindividual scores for each CVE. |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-25537 | Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege. | 6.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H See NVD (http://nvd.nist.gov/ ) forindividual scores for each CVE. |
Getroffen producten en herstel
| Product | BIOS Update Version | BIOS Release Date |
|---|---|---|
Precision 7920 Rack |
2.18.2 | 05/19/2023 |
| 7920 XL Rack |
2.18.2 | 05/19/2023 |
| Product | BIOS Update Version | BIOS Release Date |
|---|---|---|
Precision 7920 Rack |
2.18.2 | 05/19/2023 |
| 7920 XL Rack |
2.18.2 | 05/19/2023 |
Revisiegeschiedenis
| Revision | Date | Description |
| 1.0 | 2023-05-15 | Initial Release |
| 1.1 | 2023-05-19 | Updated Affected Products and Remediation section BIOS Update Version |
| 1.2 | 2023-05-19 | Updated CVE Description |
Verwante informatie
Juridische verklaring van afstand
Getroffen producten
7920 XL Rack, Precision 7920 RackArtikeleigenschappen
Artikelnummer: 000213287
Artikeltype: Dell Security Advisory
Laatst aangepast: 19 mei 2023
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.