CVE-2024-0162: Buffer Overflow

Q: What is the severity of CVE-2024-0162?

The severity of CVE-2024-0162 is considered to be high due to its potential for out-of-bound read/writes to SMRAM.

Q: How do I fix CVE-2024-0162?

To fix CVE-2024-0162, update the affected Dell PowerEdge Server BIOS and Dell Precision Rack BIOS to the latest version as provided by Dell.

Q: Who is affected by CVE-2024-0162?

CVE-2024-0162 affects users of Dell PowerEdge Server BIOS and Dell Precision Rack BIOS running specific versions before the security update.

Q: What could an attacker exploit in CVE-2024-0162?

An attacker could exploit CVE-2024-0162 to perform out-of-bound read and write operations to System Management Mode RAM (SMRAM).

Q: Is CVE-2024-0162 a remote or local vulnerability?

CVE-2024-0162 is a local vulnerability that requires low privileged access for exploitation.

Published Mar 13, 2024

Updated

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM.

Affected Software

118 affected components

Dell PowerEdge Server BIOS

Dell Precision Rack BIOS

All of the following

Dell Poweredge R660 Firmware<2.0.0

Dell Poweredge R660

All of the following

Dell Poweredge R760 Firmware<2.0.0

Dell Poweredge R760

All of the following

Dell Poweredge C6620 Firmware<2.0.0

Dell Poweredge C6620

All of the following

Dell Poweredge Mx760c Firmware<2.0.0

Dell Poweredge Mx760c

All of the following

Dell Poweredge R860 Firmware<1.8.0

Dell Poweredge R860

All of the following

Dell Poweredge R960 Firmware<1.8.0

Dell Poweredge R960

All of the following

Dell Poweredge Hs5610 Firmware<2.0.0

Dell Poweredge Hs5610

All of the following

Dell Poweredge Hs5620 Firmware<2.0.0

Dell Poweredge Hs5620

All of the following

Dell Poweredge R660xs Firmware<2.0.0

Dell Poweredge R660xs

All of the following

Dell Poweredge R760xs Firmware<2.0.0

Dell Poweredge R760xs

All of the following

Dell Poweredge R760xd2 Firmware<2.0.0

Dell Poweredge R760xd2

All of the following

Dell Poweredge T560 Firmware<2.0.0

Dell Poweredge T560

All of the following

Dell Poweredge R760xa Firmware<2.0.0

Dell Poweredge R760xa

All of the following

Dell Poweredge Xe9680 Firmware<1.8.0

Dell Poweredge Xe9680

All of the following

Dell Poweredge Xr5610 Firmware<1.8.0

Dell Poweredge Xr5610

All of the following

Dell Poweredge Xr8610t Firmware<1.8.0

Dell Poweredge Xr8610t

All of the following

Dell Poweredge Xr8620t Firmware<1.8.0

Dell Poweredge Xr8620t

All of the following

Dell Poweredge Xr7620 Firmware<1.8.0

Dell Poweredge Xr7620

All of the following

Dell Poweredge Xe8640 Firmware<1.8.0

Dell Poweredge Xe8640

All of the following

Dell Poweredge Xe9640 Firmware<1.8.0

Dell Poweredge Xe9640

All of the following

Dell Poweredge R6615 Firmware<1.7.2

Dell Poweredge R6615

All of the following

Dell Poweredge R7615 Firmware<1.7.2

Dell Poweredge R7615

All of the following

Dell Poweredge R6625 Firmware<1.7.2

Dell Poweredge R6625

All of the following

Dell Poweredge R7625 Firmware<1.7.2

Dell Poweredge R7625

All of the following

Dell Poweredge C6615 Firmware<1.2.3

Dell Poweredge C6615

All of the following

Dell Poweredge R650 Firmware<1.13.2

Dell Poweredge R650

All of the following

Dell Poweredge R750 Firmware<1.13.2

Dell Poweredge R750

All of the following

Dell Poweredge R750xa Firmware<1.13.2

Dell Poweredge R750xa

All of the following

Dell Poweredge C6520 Firmware<1.13.2

Dell Poweredge C6520

All of the following

Dell Poweredge Mx750c Firmware<1.13.2

Dell Poweredge Mx750c

All of the following

Dell Poweredge R550 Firmware<1.13.2

Dell Poweredge R550

All of the following

Dell Poweredge R450 Firmware<1.13.2

Dell Poweredge R450

All of the following

Dell Poweredge R650xs Firmware<1.13.2

Dell Poweredge R650xs

All of the following

Dell Poweredge R750xs Firmware<1.13.2

Dell Poweredge R750xs

All of the following

Dell Poweredge T550 Firmware<1.13.2

Dell Poweredge T550

All of the following

Dell Poweredge Xr11 Firmware<1.13.2

Dell Poweredge Xr11

All of the following

Dell Poweredge Xr12 Firmware<1.13.2

Dell Poweredge Xr12

All of the following

Dell Poweredge T150 Firmware<1.9.1

Dell Poweredge T150

All of the following

Dell Poweredge T350 Firmware<1.9.1

Dell Poweredge T350

All of the following

Dell Poweredge R250 Firmware<1.9.1

Dell Poweredge R250

All of the following

Dell Poweredge R350 Firmware<1.9.1

Dell Poweredge R350

All of the following

Dell Poweredge Xr4510c Firmware<1.14.1

Dell Poweredge Xr4510c

All of the following

Dell Poweredge Xr4520c Firmware<1.14.1

Dell Poweredge Xr4520c

All of the following

Dell Poweredge R6515 Firmware<2.14.1

Dell Poweredge R6515

All of the following

Dell Poweredge R6525 Firmware<2.14.1

Dell Poweredge R6525

All of the following

Dell Poweredge R7515 Firmware<2.14.1

Dell Poweredge R7515

All of the following

Dell Poweredge R7525 Firmware<2.14.1

Dell Poweredge R7525

All of the following

Dell Poweredge C6525 Firmware<2.14.1

Dell Poweredge C6525

All of the following

Dell Poweredge Xe8545 Firmware<2.14.1

Dell Poweredge Xe8545

All of the following

Dell Xc Core Xc660 Firmware<2.0.0

Dell Xc Core Xc660

All of the following

Dell Xc Core Xc760 Firmware<2.0.0

Dell Xc Core Xc760

All of the following

Dell Xc Core Xc7625 Firmware<1.7.2

Dell Xc Core Xc7625

All of the following

Dell Emc Xc Core Xc450 Firmware<1.13.2

Dell Emc Xc Core Xc450

All of the following

Dell Emc Xc Core Xc650 Firmware<1.13.2

Dell Emc Xc Core Xc650

All of the following

Dell Emc Xc Core Xc750 Firmware<1.13.2

Dell Emc Xc Core Xc750

All of the following

Dell Emc Xc Core Xc750xa Firmware<1.13.2

Dell Emc Xc Core Xc750xa

All of the following

Dell Emc Xc Core Xc6520 Firmware<1.13.2

Dell Emc Xc Core Xc6520

All of the following

Dell Emc Xc Core Xc7525 Firmware<2.14.1

Dell Emc Xc Core Xc7525

Event History

Mar 13, 2024

CVE Published

via MITRE·04:18 PM

Data Sourced

via MITRE·04:18 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-0162?

The severity of CVE-2024-0162 is considered to be high due to its potential for out-of-bound read/writes to SMRAM.

How do I fix CVE-2024-0162?

To fix CVE-2024-0162, update the affected Dell PowerEdge Server BIOS and Dell Precision Rack BIOS to the latest version as provided by Dell.

Who is affected by CVE-2024-0162?

CVE-2024-0162 affects users of Dell PowerEdge Server BIOS and Dell Precision Rack BIOS running specific versions before the security update.

What could an attacker exploit in CVE-2024-0162?

An attacker could exploit CVE-2024-0162 to perform out-of-bound read and write operations to System Management Mode RAM (SMRAM).

Is CVE-2024-0162 a remote or local vulnerability?

CVE-2024-0162 is a local vulnerability that requires low privileged access for exploitation.

CVE-2024-0162: Buffer Overflow

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2024-0162?

How do I fix CVE-2024-0162?

Who is affected by CVE-2024-0162?

What could an attacker exploit in CVE-2024-0162?

Is CVE-2024-0162 a remote or local vulnerability?

Company

Resources

Contact