CVE-2024-0173
Low
Description
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.
SeverityLow
CVSS3.8
Exploit probability—
ProductDell Poweredge R660 Firmware
PublishedMar 13, 2024
First seenMar 13, 2024
Weakness typeCWE-788CWE-788
How to fix
Update
- dell poweredge_r660_firmware2.0.0 or later
- dell poweredge_r760_firmware2.0.0 or later
- dell poweredge_c6620_firmware2.0.0 or later
- dell poweredge_mx760c_firmware2.0.0 or later
- dell poweredge_r860_firmware1.8.0 or later
- dell poweredge_r960_firmware1.8.0 or later
- dell poweredge_hs5610_firmware2.0.0 or later
- dell poweredge_hs5620_firmware2.0.0 or later
- dell poweredge_r660xs_firmware2.0.0 or later
- dell poweredge_r760xs_firmware2.0.0 or later
- dell poweredge_r760xd2_firmware2.0.0 or later
- dell poweredge_t560_firmware2.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell poweredge_r660_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_r760_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_c6620_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_mx760c_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_r860_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_r960_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_hs5610_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_hs5620_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_r660xs_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_r760xs_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_r760xd2_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_t560_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_r760xa_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_xe9680_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_xr5610_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_xr8610t_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_xr8620t_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_xr7620_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_xe8640_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_xe9640_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_r6615_firmware | v < 1.7.2 | 1.7.2 |
| dell poweredge_r7615_firmware | v < 1.7.2 | 1.7.2 |
| dell poweredge_r6625_firmware | v < 1.7.2 | 1.7.2 |
| dell poweredge_r7625_firmware | v < 1.7.2 | 1.7.2 |
| dell poweredge_c6615_firmware | v < 1.2.3 | 1.2.3 |
| dell poweredge_r650_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_r750_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_r750xa_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_c6520_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_mx750c_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_r550_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_r450_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_r650xs_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_r750xs_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_t550_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_xr11_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_xr12_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_xr4510c_firmware | v < 1.14.1 | 1.14.1 |
| dell poweredge_xr4520c_firmware | v < 1.14.1 | 1.14.1 |
| dell poweredge_t150_firmware | v < 1.9.1 | 1.9.1 |
| dell poweredge_t350_firmware | v < 1.9.1 | 1.9.1 |
| dell poweredge_r250_firmware | v < 1.9.1 | 1.9.1 |
| dell poweredge_r350_firmware | v < 1.9.1 | 1.9.1 |
| dell poweredge_r6515_firmware | v < 2.14.1 | 2.14.1 |
| dell poweredge_r6525_firmware | v < 2.14.1 | 2.14.1 |
| dell poweredge_r7515_firmware | v < 2.14.1 | 2.14.1 |
| dell poweredge_r7525_firmware | v < 2.14.1 | 2.14.1 |
| dell poweredge_c6525_firmware | v < 2.14.1 | 2.14.1 |
| dell poweredge_xe8545_firmware | v < 2.14.1 | 2.14.1 |
| dell poweredge_r740_firmware | v < 2.21.2 | 2.21.2 |
| dell poweredge_r740xd_firmware | v < 2.21.2 | 2.21.2 |
| dell poweredge_r640_firmware | v < 2.21.2 | 2.21.2 |
| dell poweredge_r940_firmware | v < 2.21.2 | 2.21.2 |
| dell poweredge_r540_firmware | v < 2.21.1 | 2.21.1 |
| dell poweredge_r440_firmware | v < 2.21.1 | 2.21.1 |
| dell poweredge_t440_firmware | v < 2.21.1 | 2.21.1 |
| dell poweredge_xr2_firmware | v < 2.21.1 | 2.21.1 |
| dell poweredge_r740xd2_firmware | v < 2.21.1 | 2.21.1 |
| dell poweredge_r840_firmware | v < 2.21.0 | 2.21.0 |
| dell poweredge_r940xa_firmware | v < 2.21.0 | 2.21.0 |
| dell poweredge_t640_firmware | v < 2.21.0 | 2.21.0 |
| dell poweredge_c6420_firmware | v < 2.21.0 | 2.21.0 |
| dell poweredge_fc640_firmware | v < 2.21.0 | 2.21.0 |
| dell poweredge_m640_firmware | v < 2.21.0 | 2.21.0 |
| dell poweredge_m640_\(pe_vrtx\)_firmware | v < 2.21.0 | 2.21.0 |
| dell poweredge_mx740c_firmware | v < 2.21.0 | 2.21.0 |
| dell poweredge_mx840c_firmware | v < 2.21.0 | 2.21.0 |
| dell poweredge_c4140_firmware | v < 2.21.1 | 2.21.1 |
| dell dss_8440_firmware | v < 2.21.0 | 2.21.0 |
| dell poweredge_xe2420_firmware | v < 2.21.1 | 2.21.1 |
| dell poweredge_xe7420_firmware | v < 2.21.0 | 2.21.0 |
| dell poweredge_xe7440_firmware | v < 2.21.0 | 2.21.0 |
| dell poweredge_t140_firmware | v < 2.16.0 | 2.16.0 |
| dell poweredge_t340_firmware | v < 2.16.0 | 2.16.0 |
| dell poweredge_r240_firmware | v < 2.16.0 | 2.16.0 |
| dell poweredge_r340_firmware | v < 2.16.0 | 2.16.0 |
| dell poweredge_r730_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_r730xd_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_r630_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_c4130_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_r930_firmware | v < 2.14.0 | 2.14.0 |
| dell poweredge_m630_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_m630_\(pe_vrtx\)_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_fc630_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_fc430_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_m830_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_m830_\(pe_vrtx\)_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_fc830_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_t630_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_r530_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_r430_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_t430_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_r830_firmware | v < 1.19.0 | 1.19.0 |
| dell poweredge_c6320_firmware | v < 2.19.0 | 2.19.0 |
| dell poweredge_t130_firmware | v < 2.20.0 | 2.20.0 |
| dell poweredge_r230_firmware | v < 2.20.0 | 2.20.0 |
| dell poweredge_t330_firmware | v < 2.20.0 | 2.20.0 |
| dell poweredge_r330_firmware | v < 2.20.0 | 2.20.0 |
| dell nx3240_firmware | v < 2.21.2 | 2.21.2 |
| dell nx3340_firmware | v < 2.21.2 | 2.21.2 |
| dell nx3230_firmware | v < 2.19.0 | 2.19.0 |
| dell nx3330_firmware | v < 2.19.0 | 2.19.0 |
| dell nx430_firmware | v < 2.20.0 | 2.20.0 |
| dell nx440_firmware | v < 2.16.0 | 2.16.0 |
| dell xc_core_xc660_firmware | v < 2.0.0 | 2.0.0 |
| dell xc_core_xc760_firmware | v < 2.0.0 | 2.0.0 |
| dell xc_core_xc7625_firmware | v < 1.7.2 | 1.7.2 |
| dell emc_xc_core_xc450_firmware | v < 1.13.2 | 1.13.2 |
| dell emc_xc_core_xc650_firmware | v < 1.13.2 | 1.13.2 |
| dell emc_xc_core_xc750_firmware | v < 1.13.2 | 1.13.2 |
| dell emc_xc_core_xc750xa_firmware | v < 1.13.2 | 1.13.2 |
| dell emc_xc_core_xc6520_firmware | v < 1.13.2 | 1.13.2 |
| dell emc_xc_core_xc7525_firmware | v < 2.14.1 | 2.14.1 |
| dell emc_xc_core_6420_system_firmware | v < 2.21.0 | 2.21.0 |
| dell emc_xc_core_xc640_system_firmware | v < 2.21.2 | 2.21.2 |
| dell emc_xc_core_xc740xd_system_firmware | v < 2.21.2 | 2.21.2 |
| dell emc_xc_core_xc740xd2_firmware | v < 2.21.1 | 2.21.1 |
| dell emc_xc_core_xc940_system_firmware | v < 2.21.2 | 2.21.2 |
| dell emc_xc_core_xcxr2_firmware | v < 2.21.1 | 2.21.1 |
| dell xc6320_firmware | v < 2.19.0 | 2.19.0 |
| dell xc430_firmware | v < 2.19.0 | 2.19.0 |
| dell xc630_firmware | v < 2.19.0 | 2.19.0 |
| dell xc730_firmware | v < 2.19.0 | 2.19.0 |
| dell xc730xd_firmware | v < 2.19.0 | 2.19.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.