Poweredge T360 Firmware CVE-2024-0161

HIGH

Improper Input Validation (CWE-20)

2024-03-13 security_alert@emc.com

Information Disclosure Dell Poweredge T360 Firmware Poweredge R360 Firmware Poweredge R650 Firmware Poweredge R750 Firmware Poweredge R750Xa Firmware Poweredge C6520 Firmware Poweredge Mx750C Firmware Poweredge R550 Firmware Poweredge R450 Firmware Poweredge R650Xs Firmware Poweredge R750Xs Firmware Poweredge T550 Firmware Poweredge Xr11 Firmware Poweredge Xr12 Firmware Poweredge Xr4510C Firmware Poweredge Xr4520C Firmware Poweredge T150 Firmware Poweredge T350 Firmware Poweredge R250 Firmware Poweredge R350 Firmware Poweredge R740 Firmware Poweredge R740Xd Firmware Poweredge R640 Firmware Poweredge R940 Firmware Poweredge R540 Firmware Poweredge R440 Firmware Poweredge T440 Firmware Poweredge Xr2 Firmware Poweredge R740Xd2 Firmware Poweredge R840 Firmware Poweredge R940Xa Firmware Poweredge T640 Firmware Poweredge C6420 Firmware Poweredge Fc640 Firmware Poweredge M640 Firmware Poweredge M640 Pe Vrtx Firmware Poweredge Mx740C Firmware Poweredge Mx840C Firmware Poweredge C4140 Firmware Dss 8440 Firmware Poweredge Xe2420 Firmware Poweredge Xe7420 Firmware Poweredge Xe7440 Firmware Poweredge R730 Firmware Poweredge R730Xd Firmware Poweredge R630 Firmware Poweredge C4130 Firmware Poweredge R930 Firmware Poweredge M630 Firmware Poweredge M630 Pe Vrtx Firmware Poweredge Fc630 Firmware Poweredge Fc430 Firmware Poweredge M830 Firmware Poweredge M830 Pe Vrtx Firmware Poweredge Fc830 Firmware Poweredge T630 Firmware Poweredge R530 Firmware Poweredge R430 Firmware Poweredge T430 Firmware Poweredge R830 Firmware Poweredge C6320 Firmware Poweredge T130 Firmware Poweredge R230 Firmware Poweredge T330 Firmware Poweredge R330 Firmware Emc Storage Nx3240 Firmware Emc Storage Nx3340 Firmware Storage Nx3230 Firmware Storage Nx3330 Firmware Storage Nx430 Firmware Emc Xc Core Xc450 Firmware Emc Xc Core Xc650 Firmware Emc Xc Core Xc750 Firmware Emc Xc Core Xc750Xa Firmware Emc Xc Core Xc6520 Firmware Emc Xc Core 6420 Firmware Emc Xc Core Xc640 Firmware Emc Xc Core Xc740Xd Firmware Emc Xc Core Xc740Xd2 Firmware Emc Xc Core Xc940 Firmware Emc Xc Core Xcxr2 Firmware Xc6320 Firmware Xc430 Firmware Xc630 Firmware Xc730 Firmware Xc730Xd Firmware

8.4

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

8.4 HIGH

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Mar 13, 2024 - 16:15 nvd

HIGH 8.4

DescriptionNVD

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.

AnalysisAI

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. Rated high severity (CVSS 8.4), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM. Affected products include: Dell Poweredge T360 Firmware, Dell Poweredge R360 Firmware, Dell Poweredge R650 Firmware, Dell Poweredge R750 Firmware, Dell Poweredge R750Xa Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Poweredge T360 Firmware

View all

CVE-2025-26482 MEDIUM This Month

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. Rated medium

Same weakness CWE-20 – Improper Input Validation

View all

CVE-2021-44228 CRITICAL POC

CVE-2024-3400 CRITICAL POC

CVE-2022-47966 CRITICAL POC

CVE-2023-22515 CRITICAL POC

CVE-2009-0927 HIGH POC

CVE-2017-9791 CRITICAL POC

CVE-2017-15944 CRITICAL POC

CVE-2019-0604 CRITICAL POC

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2024-0161 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy