|
2023-12-08
|
CVE-2023-32460
|
Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.
|
Dss_8440_firmware, Emc_nx440_firmware, Emc_storage_nx3240_firmware, Emc_storage_nx3340_firmware, Emc_xc_core_6420_firmware, Emc_xc_core_xc450_firmware, Emc_xc_core_xc640_firmware, Emc_xc_core_xc650_firmware, Emc_xc_core_xc6520_firmware, Emc_xc_core_xc740xd2_firmware, Emc_xc_core_xc740xd_firmware, Emc_xc_core_xc750_firmware, Emc_xc_core_xc750xa_firmware, Emc_xc_core_xc7525_firmware, Emc_xc_core_xc940_firmware, Emc_xc_core_xcxr2_firmware, Nx3230_firmware, Nx3330_firmware, Nx430_firmware, Poweredge_c4130_firmware, Poweredge_c4140_firmware, Poweredge_c6320_firmware, Poweredge_c6420_firmware, Poweredge_c6520_firmware, Poweredge_c6525_firmware, Poweredge_c6615_firmware, Poweredge_c6620_firmware, Poweredge_fc430_firmware, Poweredge_fc630_firmware, Poweredge_fc640_firmware, Poweredge_fc830_firmware, Poweredge_hs5610_firmware, Poweredge_hs5620_firmware, Poweredge_m630_\(Pe_vrtx\)_firmware, Poweredge_m630_firmware, Poweredge_m640_\(Pe_vrtx\)_firmware, Poweredge_m640_firmware, Poweredge_m830_\(Pe_vrtx\)_firmware, Poweredge_m830_firmware, Poweredge_mx740c_firmware, Poweredge_mx750c_firmware, Poweredge_mx760c_firmware, Poweredge_mx840c_firmware, Poweredge_r230_firmware, Poweredge_r240_firmware, Poweredge_r250_firmware, Poweredge_r330_firmware, Poweredge_r340_firmware, Poweredge_r350_firmware, Poweredge_r430_firmware, Poweredge_r440_firmware, Poweredge_r450_firmware, Poweredge_r530_firmware, Poweredge_r540_firmware, Poweredge_r550_firmware, Poweredge_r630_firmware, Poweredge_r640_firmware, Poweredge_r6415_firmware, Poweredge_r650_firmware, Poweredge_r650xs_firmware, Poweredge_r6515_firmware, Poweredge_r6525_firmware, Poweredge_r660_firmware, Poweredge_r660xs_firmware, Poweredge_r6615_firmware, Poweredge_r6625_firmware, Poweredge_r730_firmware, Poweredge_r730xd_firmware, Poweredge_r740_firmware, Poweredge_r740xd2_firmware, Poweredge_r740xd_firmware, Poweredge_r7415_firmware, Poweredge_r7425_firmware, Poweredge_r750_firmware, Poweredge_r750xa_firmware, Poweredge_r750xs_firmware, Poweredge_r7515_firmware, Poweredge_r7525_firmware, Poweredge_r760_firmware, Poweredge_r760xa_firmware, Poweredge_r760xd2_firmware, Poweredge_r760xs_firmware, Poweredge_r7615_firmware, Poweredge_r7625_firmware, Poweredge_r830_firmware, Poweredge_r840_firmware, Poweredge_r860_firmware, Poweredge_r930_firmware, Poweredge_r940_firmware, Poweredge_r940xa_firmware, Poweredge_r960_firmware, Poweredge_t130_firmware, Poweredge_t140_firmware, Poweredge_t150_firmware, Poweredge_t330_firmware, Poweredge_t340_firmware, Poweredge_t350_firmware, Poweredge_t430_firmware, Poweredge_t440_firmware, Poweredge_t550_firmware, Poweredge_t560_firmware, Poweredge_t630_firmware, Poweredge_t640_firmware, Poweredge_xe2420_firmware, Poweredge_xe7420_firmware, Poweredge_xe7440_firmware, Poweredge_xe8545_firmware, Poweredge_xe8640_firmware, Poweredge_xe9640_firmware, Poweredge_xe9680_firmware, Poweredge_xr11_firmware, Poweredge_xr12_firmware, Poweredge_xr2_firmware, Poweredge_xr4510c_firmware, Poweredge_xr4520c_firmware, Poweredge_xr5610_firmware, Poweredge_xr7620_firmware, Poweredge_xr8610t_firmware, Poweredge_xr8620t_firmware, Xc430_hyperconverged_appliance_firmware, Xc630_hyperconverged_appliance_firmware, Xc6320_hyperconverged_appliance_firmware, Xc730_hyperconverged_appliance_firmware, Xc730xd_hyperconverged_appliance_firmware, Xc_core_xc660_firmware, Xc_core_xc760_firmware
|
7.8
|
|
|
|
2023-05-22
|
CVE-2023-25537
|
Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege.
|
Dss_8440_firmware, Emc_storage_nx3240_firmware, Emc_storage_nx3340_firmware, Emc_xc_core_6420_firmware, Emc_xc_core_xc640_firmware, Emc_xc_core_xc740xd2_firmware, Emc_xc_core_xc740xd_firmware, Emc_xc_core_xc940_firmware, Emc_xc_core_xcxr2_firmware, Poweredge_c4140_firmware, Poweredge_c6420_firmware, Poweredge_fc640_firmware, Poweredge_m640_firmware, Poweredge_mx740c_firmware, Poweredge_mx840c_firmware, Poweredge_r440_firmware, Poweredge_r540_firmware, Poweredge_r640_firmware, Poweredge_r740_firmware, Poweredge_r740xd2_firmware, Poweredge_r740xd_firmware, Poweredge_r840_firmware, Poweredge_r940_firmware, Poweredge_r940xa_firmware, Poweredge_t440_firmware, Poweredge_t640_firmware, Poweredge_xe2420_firmware, Poweredge_xe7420_firmware, Poweredge_xe7440_firmware, Poweredge_xr2_firmware
|
7.8
|
|
|
|
2021-06-14
|
CVE-2021-21554
|
Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.
|
Poweredge_mx740c_firmware, Poweredge_mx840c_firmware, Poweredge_r640_firmware, Poweredge_r740_firmware, Poweredge_r740xd_firmware, Poweredge_r840_firmware, Poweredge_r940_firmware, Poweredge_r940xa_firmware, Precision_7920_firmware
|
6.7
|
|
|
|
2021-06-14
|
CVE-2021-21557
|
Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.
|
Poweredge_c4140_firmware, Poweredge_c6420_firmware, Poweredge_c6525_firmware, Poweredge_fc640_firmware, Poweredge_m640_firmware, Poweredge_m640p_firmware, Poweredge_mx740c_firmware, Poweredge_mx840c_firmware, Poweredge_r240_firmware, Poweredge_r340_firmware, Poweredge_r440_firmware, Poweredge_r540_firmware, Poweredge_r640_firmware, Poweredge_r6415_firmware, Poweredge_r6515_firmware, Poweredge_r6525_firmware, Poweredge_r740_firmware, Poweredge_r740xd2_firmware, Poweredge_r740xd_firmware, Poweredge_r7415_firmware, Poweredge_r7425_firmware, Poweredge_r7515_firmware, Poweredge_r7525_firmware, Poweredge_r840_firmware, Poweredge_r940_firmware, Poweredge_r940xa_firmware, Poweredge_t140_firmware, Poweredge_t340_firmware, Poweredge_t440_firmware, Poweredge_t640_firmware, Poweredge_xr2_firmware
|
6.7
|
|
|
|
2021-06-14
|
CVE-2021-21555
|
Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.
|
Poweredge_mx740c_firmware, Poweredge_mx840c_firmware, Poweredge_r640_firmware, Poweredge_r740_firmware, Poweredge_r740xd_firmware, Poweredge_r840_firmware, Poweredge_r940_firmware, Poweredge_r940xa_firmware, Poweredge_t640_firmware
|
6.7
|
|
|
|
2021-06-14
|
CVE-2021-21556
|
Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a stack-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.
|
Poweredge_mx740c_firmware, Poweredge_mx840c_firmware, Poweredge_r640_firmware, Poweredge_r740_firmware, Poweredge_r740xd_firmware, Poweredge_r840_firmware, Poweredge_r940_firmware, Poweredge_r940xa_firmware, Poweredge_t640_firmware
|
6.7
|
|
|