CVE-2024-0154

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-13 · updated 2026-06-17
Weakness: CWE-788

Description

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.

Affected products

Dell Dss 8440 Firmware: before 2.21.0 — fixed in 2.21.0
Dell Emc Xc Core 6420 System Firmware: before 2.21.0 — fixed in 2.21.0
Dell Emc Xc Core Xc450 Firmware: before 1.13.2 — fixed in 1.13.2
Dell Emc Xc Core Xc640 System Firmware: before 2.21.2 — fixed in 2.21.2
Dell Emc Xc Core Xc650 Firmware: before 1.13.2 — fixed in 1.13.2
Dell Emc Xc Core Xc6520 Firmware: before 1.13.2 — fixed in 1.13.2
Dell Emc Xc Core Xc740Xd2 Firmware: before 2.21.1 — fixed in 2.21.1
Dell Emc Xc Core Xc740Xd System Firmware: before 2.21.2 — fixed in 2.21.2
Dell Emc Xc Core Xc750 Firmware: before 1.13.2 — fixed in 1.13.2
Dell Emc Xc Core Xc750Xa Firmware: before 1.13.2 — fixed in 1.13.2
Dell Emc Xc Core Xc7525 Firmware: before 2.14.1 — fixed in 2.14.1
Dell Emc Xc Core Xc940 System Firmware: before 2.21.2 — fixed in 2.21.2
Dell Emc Xc Core Xcxr2 Firmware: before 2.21.1 — fixed in 2.21.1
Dell Nx3230 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Nx3240 Firmware: before 2.21.2 — fixed in 2.21.2
Dell Nx3330 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Nx3340 Firmware: before 2.21.2 — fixed in 2.21.2
Dell Nx430 Firmware: before 2.20.0 — fixed in 2.20.0
Dell Nx440 Firmware: before 2.16.0 — fixed in 2.16.0
Dell Poweredge C4130 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge C4140 Firmware: before 2.21.1 — fixed in 2.21.1
Dell Poweredge C6320 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge C6420 Firmware: before 2.21.0 — fixed in 2.21.0
Dell Poweredge C6520 Firmware: before 1.13.2 — fixed in 1.13.2
Dell Poweredge C6525 Firmware: before 2.14.1 — fixed in 2.14.1
Dell Poweredge C6615 Firmware: before 1.2.3 — fixed in 1.2.3
Dell Poweredge C6620 Firmware: before 2.0.0 — fixed in 2.0.0
Dell Poweredge Fc430 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge Fc630 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge Fc640 Firmware: before 2.21.0 — fixed in 2.21.0

How to fix

Upgrade to a fixed version: Dell Dss 8440 Firmware 2.21.0; Dell Emc Xc Core 6420 System Firmware 2.21.0; Dell Emc Xc Core Xc450 Firmware 1.13.2; Dell Emc Xc Core Xc640 System Firmware 2.21.2; Dell Emc Xc Core Xc650 Firmware 1.13.2; Dell Emc Xc Core Xc6520 Firmware 1.13.2; Dell Emc Xc Core Xc740Xd2 Firmware 2.21.1; Dell Emc Xc Core Xc740Xd System Firmware 2.21.2; Dell Emc Xc Core Xc750 Firmware 1.13.2; Dell Emc Xc Core Xc750Xa Firmware 1.13.2; Dell Emc Xc Core Xc7525 Firmware 2.14.1; Dell Emc Xc Core Xc940 System Firmware 2.21.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-0154 or the next vulnerability affects your stack