Dell PowerEdge 安全漏洞
CVE编号
CVE-2023-25537利用情况
暂无补丁情况
N/A披露时间
2023-05-22漏洞描述
Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege.解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接 |
|
|---|---|
| https://www.dell.com/support/kbdoc/en-us/000213550/dsa-2023-098-security-upda... |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | dell | dss_8440_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | emc_storage_nx3240_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | emc_storage_nx3340_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | emc_xc_core_6420_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | emc_xc_core_xc640_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | emc_xc_core_xc740xd2_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | emc_xc_core_xc740xd_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | emc_xc_core_xc940_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | emc_xc_core_xcxr2_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_c4140_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_c6420_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_fc640_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_m640_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_mx740c_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_mx840c_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_r440_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_r540_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_r640_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_r740xd2_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_r740xd_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_r740_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_r840_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_r940xa_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_r940_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_t440_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_t640_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_xe2420_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_xe7420_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_xe7440_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | dell | poweredge_xr2_firmware | * | Up to (excluding) 2.18.1 | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | dss_8440 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | emc_storage_nx3240 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | emc_storage_nx3340 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | emc_xc_core_6420 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | emc_xc_core_xc640 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | emc_xc_core_xc740xd | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | emc_xc_core_xc740xd2 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | emc_xc_core_xc940 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | emc_xc_core_xcxr2 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_c4140 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_c6420 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_fc640 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_m640 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_mx740c | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_mx840c | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_r440 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_r540 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_r640 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_r740 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_r740xd | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_r740xd2 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_r840 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_r940 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_r940xa | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_t440 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_t640 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_xe2420 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_xe7420 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_xe7440 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | dell | poweredge_xr2 | - | - | |||||
- 攻击路径 本地
- 攻击复杂度 低
- 权限要求 低
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 高
- 完整性 高
| CWE-ID | 漏洞类型 |
| CWE-787 | 跨界内存写 |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论