Skip to content
OpenAdvisories
Medium WID-SEC-2025-2900 1 CVE

Dell PowerEdge: Schwachstelle ermöglicht Codeausführung

Published Dec 18, 2025 · Updated Dec 18, 2025 · de-DE

Vendor: Dell Product: PowerEdge

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Dell PowerEdge ausnutzen, um beliebigen Programmcode auszuführen.

Product

PowerEdge ist der Markenname für Server des Herstellers Dell.

Vulnerabilities 1

  • High 7.5
    CVE-2024-42446

    TOCTOU in SmmWhea

    APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution.

    AMI AptioV

Revision history

  1. #1

    Initiale Fassung

References