Skip to content
OpenAdvisories
Medium WID-SEC-2024-0660 2 CVEs

Dell PowerEdge BIOS: Mehrere Schwachstellen ermöglichen Manipulation

Published Mar 18, 2024 · Updated Mar 18, 2024 · de-DE

Vendor: Dell Product: BIOS Product: PowerEdge

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Dell PowerEdge und Dell BIOS ausnutzen, um Daten zu manipulieren.

Product

PowerEdge ist der Markenname für Server des Herstellers Dell.
Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.

Vulnerabilities 2

  • High 7.2
    CVE-2024-22453

    Dell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high privileged attacker could …

    Dell PowerEdge Platform
  • Medium 4.4
    CVE-2024-25942

    Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high pr…

    Dell PowerEdge Platform

Revision history

  1. #1

    Initiale Fassung

References