Summary
Ein lokaler Angreifer kann eine Schwachstelle in Dell PowerEdge ausnutzen, um Informationen offenzulegen.
Product
PowerEdge ist der Markenname für Server des Herstellers Dell.
Vulnerabilities 1
-
Low 3.8
Nuvoton - CWE-1300: Improper Protection of Physical Side Channels
A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key.
Revision history
-
#3
Neue Updates von Dell aufgenommen
-
#2
Neue Updates von LENOVO aufgenommen
-
#1
Initiale Fassung
References
-
Dell Security Advisory dsa-2026-224 vom 2026-06-16
https://www.dell.com/support/kbdoc/en-us/000477639/dsa-2026-224-security-update-for-dell-poweredge-server-for-a-trusted-platform-module-tpm-2-0-firmware-vulnerability
-
Lenovo Security Advisory LEN-222658 vom 2026-08-12
https://support.lenovo.com/us/en/product_security/LEN-222658
-
Dell Security Advisory DSA-2026-401 vom 2026-09-16
https://www.dell.com/support/kbdoc/de-de/000509706/dsa-2026-401-security-update-for-dell-ecs-and-objectscale-multiple-third-party-component-vulnerabilities