CVE-2024-0154

—

CVSS 3.1

3.3 low

EPSS

<1%p10

Published

Mar 13, 2024 (Mar 13, 2024)

Modified

Jun 17, 2026

Description

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.

Vendors: dell
Products: poweredge r660 firmware, poweredge r760 firmware, poweredge c6620 firmware, poweredge mx760c firmware, poweredge r860 firmware, poweredge r960 firmware, poweredge hs5610 firmware, poweredge hs5620 firmware, poweredge r660xs firmware, poweredge r760xs firmware, poweredge r760xd2 firmware, poweredge t560 firmware
Weakness: CWE-788, CWE-125
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.