Description
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | PowerEdge Platform | N/A – < 2.0.0, N/A – < 1.7.6, N/A – < 1.7.2, N/A – < 1.2.3, N/A – < 1.13.2, N/A – < 1.14.1, N/A – < 1.9.1, N/A – < 2.14.1, N/A – < 2.21.2, N/A – < 2.21.1, N/A – < 2.21.0, N/A – < 2.16.0, N/A – < 2.19.0 , N/A – < 2.14.0 , N/A – < 1.19.0 , N/A – < 2.20.0 | 2.0.0 |
Advisories 1
- WID-SEC-2024-0608 Dell PowerEdge BIOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 2, 2024