DSA-2024-200: Security Update for Dell PowerEdge T30 Mini Tower Server for an Improper Input Validation Vulnerability

Samenvatting: Dell PowerEdge T30 Mini Tower Server remediation is available for an Improper Input Validation vulnerability that could be exploited by malicious users to compromise the affected systems. ...

Dit artikel is van toepassing op Dit artikel is niet van toepassing op Dit artikel is niet gebonden aan een specifiek product. Niet alle productversies worden in dit artikel vermeld.
Bekijk andere hulpbronnen

Impact

High

Gegevens

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2024-22429 Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution. 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2024-22429 Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution. 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

Product Software/Firmware Affected Versions Remediated Versions Link
PowerEdge T30 BIOS Versions prior to 1.15.0  Version 1.15.0 or later  https://www.dell.com/support/home/product-support/product/poweredge-t30/drivers
Product Software/Firmware Affected Versions Remediated Versions Link
PowerEdge T30 BIOS Versions prior to 1.15.0  Version 1.15.0 or later  https://www.dell.com/support/home/product-support/product/poweredge-t30/drivers

Revisiegeschiedenis

RevisionDateDescription
1.02024-05-22Initial release
2.02024-06-13updated for enhanced presentation with no changes to content

Bevestigingen

Dell would like to thank schur of BUPT, Dubhe Lab for reporting this issue.

Verwante informatie

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Juridische verklaring van afstand

Getroffen producten

PowerEdge T30
Artikeleigenschappen
Artikelnummer: 000225022
Artikeltype: Dell Security Advisory
Laatst aangepast: 14 jun. 2024
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.