CVE-2024-0161: Input Validation
Published Mar 13, 2024
·Updated
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.
Affected Software
172 affected components
All of the following
Dell Poweredge T360 Firmware<1.1.1
Dell Poweredge T360
All of the following
Dell Poweredge R360 Firmware<1.1.1
Dell Poweredge R360
All of the following
Dell Poweredge R650 Firmware<1.13.2
Dell Poweredge R650
All of the following
Dell Poweredge R750 Firmware<1.13.2
Dell Poweredge R750
All of the following
Dell Poweredge R750xa Firmware<1.13.2
Dell Poweredge R750xa
All of the following
Dell Poweredge C6520 Firmware<1.13.2
Dell Poweredge C6520
All of the following
Dell Poweredge Mx750c Firmware<1.13.2
Dell Poweredge Mx750c
All of the following
Dell Poweredge R550 Firmware<1.13.2
Dell Poweredge R550
All of the following
Dell Poweredge R450 Firmware<1.13.2
Dell Poweredge R450
All of the following
Dell Poweredge R650xs Firmware<1.13.2
Dell Poweredge R650xs
All of the following
Dell Poweredge R750xs Firmware<1.13.2
Dell Poweredge R750xs
All of the following
Dell Poweredge T550 Firmware<1.13.2
Dell Poweredge T550
All of the following
Dell Poweredge Xr11 Firmware<1.13.2
Dell Poweredge Xr11
All of the following
Dell Poweredge Xr12 Firmware<1.13.2
Dell Poweredge Xr12
All of the following
Dell Poweredge Xr4510c Firmware<1.14.1
Dell Poweredge Xr4510c
All of the following
Dell Poweredge Xr4520c Firmware<1.14.1
Dell Poweredge Xr4520c
All of the following
Dell Poweredge T150 Firmware<1.9.1
Dell Poweredge T150
All of the following
Dell Poweredge T350 Firmware<1.9.1
Dell Poweredge T350
All of the following
Dell Poweredge R250 Firmware<1.9.1
Dell Poweredge R250
All of the following
Dell Poweredge R350 Firmware<1.9.1
Dell Poweredge R350
All of the following
Dell Poweredge R740 Firmware<2.21.2
Dell Poweredge R740
All of the following
Dell Poweredge R740xd Firmware<2.21.2
Dell Poweredge R740xd
All of the following
Dell Poweredge R640 Firmware<2.21.2
Dell PowerEdge R640
All of the following
Dell Poweredge R940 Firmware<2.21.2
Dell Poweredge R940
All of the following
Dell Poweredge R540 Firmware<2.21.1
Dell Poweredge R540
All of the following
Dell Poweredge R440 Firmware<2.21.1
Dell Poweredge R440
All of the following
Dell Poweredge T440 Firmware<2.21.1
Dell Poweredge T440
All of the following
Dell Poweredge Xr2 Firmware<2.21.1
Dell Poweredge Xr2
All of the following
Dell Poweredge R740xd2 Firmware<2.21.1
Dell Poweredge R740xd2
All of the following
Dell Poweredge R840 Firmware<2.21.0
Dell Poweredge R840
All of the following
Dell Poweredge R940xa Firmware<2.21.0
Dell Poweredge R940xa
All of the following
Dell Poweredge T640 Firmware<2.21.0
Dell Poweredge T640
All of the following
Dell Poweredge C6420 Firmware<2.21.0
Dell Poweredge C6420
All of the following
Dell Poweredge Fc640 Firmware<2.21.0
Dell Poweredge Fc640
All of the following
Dell Poweredge M640 Firmware<2.21.0
Dell Poweredge M640
All of the following
Dell Poweredge M640 \(pe Vrtx\) Firmware<2.21.0
Dell Poweredge M640 \(pe Vrtx\)
All of the following
Dell Poweredge Mx740c Firmware<2.21.0
Dell Poweredge Mx740c
All of the following
Dell Poweredge Mx840c Firmware<2.21.0
Dell Poweredge Mx840c
All of the following
Dell Poweredge C4140 Firmware<2.21.1
Dell Poweredge C4140
All of the following
Dell Dss 8440 Firmware<2.21.0
Dell Dss 8440
All of the following
Dell Poweredge Xe2420 Firmware<2.21.1
Dell Poweredge Xe2420
All of the following
Dell Poweredge Xe7420 Firmware<2.21.0
Dell Poweredge Xe7420
All of the following
Dell Poweredge Xe7440 Firmware<2.21.0
Dell Poweredge Xe7440
All of the following
Dell Poweredge R730 Firmware<2.19.0
Dell Poweredge R730
All of the following
Dell Poweredge R730xd Firmware<2.19.0
Dell Poweredge R730xd
All of the following
Dell Poweredge R630 Firmware<2.19.0
Dell Poweredge R630
All of the following
Dell Poweredge C4130 Firmware<2.19.0
Dell Poweredge C4130
All of the following
Dell Poweredge R930 Firmware<2.14.0
Dell Poweredge R930
All of the following
Dell Poweredge M630 Firmware<2.19.0
Dell Poweredge M630
All of the following
Dell Poweredge M630 \(pe Vrtx\) Firmware<2.19.0
Dell Poweredge M630 \(pe Vrtx\)
All of the following
Dell Poweredge Fc630 Firmware<2.19.0
Dell Poweredge Fc630
All of the following
Dell Poweredge Fc430 Firmware<2.19.0
Dell Poweredge Fc430
All of the following
Dell Poweredge M830 Firmware<2.19.0
Dell Poweredge M830
All of the following
Dell Poweredge M830 \(pe Vrtx\) Firmware<2.19.0
Dell Poweredge M830 \(pe Vrtx\)
All of the following
Dell Poweredge Fc830 Firmware<2.19.0
Dell Poweredge Fc830
All of the following
Dell Poweredge T630 Firmware<2.19.0
Dell Poweredge T630
All of the following
Dell Poweredge R530 Firmware<2.19.0
Dell Poweredge R530
All of the following
Dell Poweredge R430 Firmware<2.19.0
Dell Poweredge R430
All of the following
Dell Poweredge T430 Firmware<2.19.0
Dell Poweredge T430
All of the following
Dell Poweredge R830 Firmware<1.19.0
Dell Poweredge R830
All of the following
Dell Poweredge C6320 Firmware<2.19.0
Dell Poweredge C6320
All of the following
Dell Poweredge T130 Firmware<2.20.0
Dell Poweredge T130
All of the following
Dell Poweredge R230 Firmware<2.20.0
Dell Poweredge R230
All of the following
Dell Poweredge T330 Firmware<2.20.0
Dell Poweredge T330
All of the following
Dell Poweredge R330 Firmware<2.20.0
Dell Poweredge R330
All of the following
Dell Emc Storage Nx3240 Firmware<2.21.2
Dell Emc Storage Nx3240
All of the following
Dell Emc Storage Nx3340 Firmware<2.21.2
Dell Emc Storage Nx3340
All of the following
Dell Storage Nx3230 Firmware<2.19.0
Dell Storage Nx3230
All of the following
Dell Storage Nx3330 Firmware<2.19.0
Dell Storage Nx3330
All of the following
Dell Storage Nx430 Firmware<2.20.0
Dell Storage Nx430
All of the following
Dell Emc Xc Core Xc450 Firmware<1.13.2
Dell Emc Xc Core Xc450
All of the following
Dell Emc Xc Core Xc650 Firmware<1.13.2
Dell Emc Xc Core Xc650
All of the following
Dell Emc Xc Core Xc750 Firmware<1.13.2
Dell Emc Xc Core Xc750
All of the following
Dell Emc Xc Core Xc750xa Firmware<1.13.2
Dell Emc Xc Core Xc750xa
All of the following
Dell Emc Xc Core Xc6520 Firmware<1.13.2
Dell Emc Xc Core Xc6520
All of the following
Dell Emc Xc Core 6420 Firmware<2.21.0
Dell Emc Xc Core 6420
All of the following
Dell Emc Xc Core Xc640 Firmware<2.21.2
Dell Emc Xc Core Xc640
All of the following
Dell Emc Xc Core Xc740xd Firmware<2.21.2
Dell Emc Xc Core Xc740xd
All of the following
Dell Emc Xc Core Xc740xd2 Firmware<2.21.1
Dell Emc Xc Core Xc740xd2
All of the following
Dell Emc Xc Core Xc940 Firmware<2.21.2
Dell Emc Xc Core Xc940
All of the following
Dell Emc Xc Core Xcxr2 Firmware<2.21.1
Dell Emc Xc Core Xcxr2
All of the following
Dell Xc6320 Firmware<2.19.0
Dell Xc6320
All of the following
Dell Xc430 Firmware<2.19.0
Dell Xc430
All of the following
Dell Xc630 Firmware<2.19.0
Dell Xc630
All of the following
Dell Xc730 Firmware<2.19.0
Dell Xc730
All of the following
Dell Xc730xd Firmware<2.19.0
Dell Xc730xd
Event History
Mar 13, 2024
CVE Published
via MITRE·04:04 PM
Data Sourced
via MITRE·04:04 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-0161?
CVE-2024-0161 is classified as a medium severity vulnerability due to the potential for local low privileged attackers to exploit it.
2
How do I fix CVE-2024-0161?
To fix CVE-2024-0161, update the firmware of affected Dell PowerEdge Servers and Precision Rack Servers to the latest version provided by Dell.
3
Who is vulnerable to CVE-2024-0161?
CVE-2024-0161 affects various models of Dell PowerEdge Servers and Precision Rack Servers prior to their respective firmware updates.
4
What does CVE-2024-0161 exploit?
CVE-2024-0161 exploits an improper verification of the SMM communication buffer, which could allow arbitrary writes to SMRAM.
5
Is CVE-2024-0161 easy to exploit?
CVE-2024-0161 requires local access by a low privileged attacker, making it less likely to be exploited remotely.