ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2024-25942

—
CVSS 3.1
6.8 medium
EPSS
<1%p14
Published
()
Modified
Description

Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.

Vendors
dell
Products
poweredge r730 firmware, poweredge r730xd firmware, poweredge r630 firmware, poweredge c4130 firmware, poweredge r930 firmware, poweredge m630 firmware, poweredge m630 \(pe vrtx\) firmware, poweredge fc630 firmware, poweredge fc430 firmware, poweredge m830 firmware, poweredge m830 \(pe vrtx\) firmware, poweredge fc830 firmware
Weakness
CWE-20, CWE-787
Vector
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.