CVE-2024-25942

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-19 · updated 2026-06-17
Weakness: CWE-20

Description

Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.

Affected products

Dell Nx3230 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Nx3330 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge C4130 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge C6320 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge Fc430 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge Fc630 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge Fc830 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge M630 (Pe Vrtx) Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge M630 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge M830 (Pe Vrtx) Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge M830 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge R430 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge R530 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge R630 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge R730 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge R730Xd Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge R830 Firmware: before 1.19.0 — fixed in 1.19.0
Dell Poweredge R930 Firmware: before 2.14.0 — fixed in 2.14.0
Dell Poweredge T430 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Poweredge T630 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Xc430 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Xc630 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Xc6320 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Xc730 Firmware: before 2.19.0 — fixed in 2.19.0
Dell Xc730Xd Firmware: before 2.19.0 — fixed in 2.19.0

How to fix

Upgrade to a fixed version: Dell Nx3230 Firmware 2.19.0; Dell Nx3330 Firmware 2.19.0; Dell Poweredge C4130 Firmware 2.19.0; Dell Poweredge C6320 Firmware 2.19.0; Dell Poweredge Fc430 Firmware 2.19.0; Dell Poweredge Fc630 Firmware 2.19.0; Dell Poweredge Fc830 Firmware 2.19.0; Dell Poweredge M630 (Pe Vrtx) Firmware 2.19.0; Dell Poweredge M630 Firmware 2.19.0; Dell Poweredge M830 (Pe Vrtx) Firmware 2.19.0; Dell Poweredge M830 Firmware 2.19.0; Dell Poweredge R430 Firmware 2.19.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-25942 or the next vulnerability affects your stack