Skip to main content

Emc Xc Core Xcxr2 Firmware CVE-2024-38304

MEDIUM
Access of Memory Location After End of Buffer (CWE-788)
2024-08-29 security_alert@emc.com
Information Disclosure Intel Dell Emc Xc Core Xcxr2 Firmware Emc Xc Core Xc940 System Firmware Emc Xc Core Xc740Xd2 Firmware Emc Xc Core Xc740Xd System Firmware Emc Xc Core Xc640 System Firmware Emc Xc Core 6420 System Firmware Emc Storage Nx3340 Firmware Emc Storage Nx3240 Firmware Poweredge Xe7440 Firmware Poweredge Xe7420 Firmware Poweredge Xe2420 Firmware Dss 8440 Firmware Poweredge C4140 Firmware Poweredge Mx840C Firmware Poweredge Mx740C Firmware Poweredge M640 For Pe Vrtx Firmware Poweredge M640 Firmware Poweredge Fc640 Firmware Poweredge C6420 Firmware Poweredge T640 Firmware Poweredge R940Xa Firmware Poweredge R840 Firmware Poweredge R740Xd2 Firmware Poweredge Xr2 Firmware Poweredge T440 Firmware Poweredge R440 Firmware Poweredge R540 Firmware Poweredge R940 Firmware Poweredge R640 Firmware Poweredge R740Xd Firmware Poweredge R740 Firmware
6.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Aug 29, 2024 - 11:15 nvd
MEDIUM 6.5

DescriptionNVD

Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

AnalysisAI

Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-788. Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure. Affected products include: Dell Emc Xc Core Xcxr2 Firmware, Dell Emc Xc Core Xc940 System Firmware, Dell Emc Xc Core Xc740Xd2 Firmware, Dell Emc Xc Core Xc740Xd System Firmware, Dell Emc Xc Core Xc640 System Firmware. Version information: prior to 2.22..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Emc Xc Core Xcxr2 Firmware

View all
CVE-2024-0161 HIGH
8.4 Mar 13

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulner
CVE-2024-0172 HIGH
7.8 Apr 03

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability.
CVE-2023-32460 HIGH
7.8 Dec 08

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. Rated high severity (CVSS 7.8), th
CVE-2023-25537 HIGH
7.8 May 22

Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out
CVE-2024-38303 MEDIUM
6.0 Aug 29

Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Improper Input Validation vulnerability.
CVE-2025-26482 MEDIUM
4.9 Sep 25

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. Rated medium
CVE-2024-0173 LOW
3.3 Mar 13

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. Rate
CVE-2024-0154 LOW
3.3 Mar 13

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. Rate

Same weakness CWE-788 – Access of Memory Location After End of Buffer

View all
CVE-2021-32629 HIGH POC
8.8
CVE-2022-1451 HIGH POC
7.1
CVE-2021-27384 CRITICAL
9.8
CVE-2019-8280 CRITICAL
9.8
CVE-2019-8266 CRITICAL
9.8
CVE-2019-8265 CRITICAL
9.8
CVE-2019-8264 CRITICAL
9.8
CVE-2021-21105 HIGH
8.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2024-38304 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy