CVE-2024-0154

LOW
Published Mar 13, 2024 Modified Jan 31, 2025 CWE-788 CWE-125

Description

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.

CVSS v3.1 Score

3.8
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Weakness Type (CWE)

CWE-788 CWE-788
CWE-125 Out-of-bounds Read

Affected Products

Vendor Product
dell poweredge_r660_firmware
dell poweredge_r660
dell poweredge_r760_firmware
dell poweredge_r760
dell poweredge_c6620_firmware
dell poweredge_c6620
dell poweredge_mx760c_firmware
dell poweredge_mx760c
dell poweredge_r860_firmware
dell poweredge_r860
dell poweredge_r960_firmware
dell poweredge_r960
dell poweredge_hs5610_firmware
dell poweredge_hs5610
dell poweredge_hs5620_firmware
dell poweredge_hs5620
dell poweredge_r660xs_firmware
dell poweredge_r660xs
dell poweredge_r760xs_firmware
dell poweredge_r760xs
dell poweredge_r760xd2_firmware
dell poweredge_r760xd2
dell poweredge_t560_firmware
dell poweredge_t560
dell poweredge_r760xa_firmware
dell poweredge_r760xa
dell poweredge_xe9680_firmware
dell poweredge_xe9680
dell poweredge_xr5610_firmware
dell poweredge_xr5610
dell poweredge_xr8610t_firmware
dell poweredge_xr8610t
dell poweredge_xr8620t_firmware
dell poweredge_xr8620t
dell poweredge_xr7620_firmware
dell poweredge_xr7620
dell poweredge_xe8640_firmware
dell poweredge_xe8640
dell poweredge_xe9640_firmware
dell poweredge_xe9640
dell poweredge_r6615_firmware
dell poweredge_r6615
dell poweredge_r7615_firmware
dell poweredge_r7615
dell poweredge_r6625_firmware
dell poweredge_r6625
dell poweredge_r7625_firmware
dell poweredge_r7625
dell poweredge_c6615_firmware
dell poweredge_c6615
dell poweredge_r650_firmware
dell poweredge_r650
dell poweredge_r750_firmware
dell poweredge_r750
dell poweredge_r750xa_firmware
dell poweredge_r750xa
dell poweredge_c6520_firmware
dell poweredge_c6520
dell poweredge_mx750c_firmware
dell poweredge_mx750c
dell poweredge_r550_firmware
dell poweredge_r550
dell poweredge_r450_firmware
dell poweredge_r450
dell poweredge_r650xs_firmware
dell poweredge_r650xs
dell poweredge_r750xs_firmware
dell poweredge_r750xs
dell poweredge_t550_firmware
dell poweredge_t550
dell poweredge_xr11_firmware
dell poweredge_xr11
dell poweredge_xr12_firmware
dell poweredge_xr12
dell poweredge_xr4510c_firmware
dell poweredge_xr4510c
dell poweredge_xr4520c_firmware
dell poweredge_xr4520c
dell poweredge_t150_firmware
dell poweredge_t150
dell poweredge_t350_firmware
dell poweredge_t350
dell poweredge_r250_firmware
dell poweredge_r250
dell poweredge_r350_firmware
dell poweredge_r350
dell poweredge_r6515_firmware
dell poweredge_r6515
dell poweredge_r6525_firmware
dell poweredge_r6525
dell poweredge_r7515_firmware
dell poweredge_r7515
dell poweredge_r7525_firmware
dell poweredge_r7525
dell poweredge_c6525_firmware
dell poweredge_c6525
dell poweredge_xe8545_firmware
dell poweredge_xe8545
dell poweredge_r740_firmware
dell poweredge_r740
dell poweredge_r740xd_firmware
dell poweredge_r740xd
dell poweredge_r640_firmware
dell poweredge_r640
dell poweredge_r940_firmware
dell poweredge_r940
dell poweredge_r540_firmware
dell poweredge_r540
dell poweredge_r440_firmware
dell poweredge_r440
dell poweredge_t440_firmware
dell poweredge_t440
dell poweredge_xr2_firmware
dell poweredge_xr2
dell poweredge_r740xd2_firmware
dell poweredge_r740xd2
dell poweredge_r840_firmware
dell poweredge_r840
dell poweredge_r940xa_firmware
dell poweredge_r940xa
dell poweredge_t640_firmware
dell poweredge_t640
dell poweredge_c6420_firmware
dell poweredge_c6420
dell poweredge_fc640_firmware
dell poweredge_fc640
dell poweredge_m640_firmware
dell poweredge_m640
dell poweredge_m640_\(pe_vrtx\)_firmware
dell poweredge_m640_\(pe_vrtx\)
dell poweredge_mx740c_firmware
dell poweredge_mx740c
dell poweredge_mx840c_firmware
dell poweredge_mx840c
dell poweredge_c4140_firmware
dell poweredge_c4140
dell dss_8440_firmware
dell dss_8440
dell poweredge_xe2420_firmware
dell poweredge_xe2420
dell poweredge_xe7420_firmware
dell poweredge_xe7420
dell poweredge_xe7440_firmware
dell poweredge_xe7440
dell poweredge_t140_firmware
dell poweredge_t140
dell poweredge_t340_firmware
dell poweredge_t340
dell poweredge_r240_firmware
dell poweredge_r240
dell poweredge_r340_firmware
dell poweredge_r340
dell poweredge_r730_firmware
dell poweredge_r730
dell poweredge_r730xd_firmware
dell poweredge_r730xd
dell poweredge_r630_firmware
dell poweredge_r630
dell poweredge_c4130_firmware
dell poweredge_c4130
dell poweredge_r930_firmware
dell poweredge_r930
dell poweredge_m630_firmware
dell poweredge_m630
dell poweredge_m630_\(pe_vrtx\)_firmware
dell poweredge_m630_\(pe_vrtx\)
dell poweredge_fc630_firmware
dell poweredge_fc630
dell poweredge_fc430_firmware
dell poweredge_fc430
dell poweredge_m830_firmware
dell poweredge_m830
dell poweredge_m830_\(pe_vrtx\)_firmware
dell poweredge_m830_\(pe_vrtx\)
dell poweredge_fc830_firmware
dell poweredge_fc830
dell poweredge_t630_firmware
dell poweredge_t630
dell poweredge_r530_firmware
dell poweredge_r530
dell poweredge_r430_firmware
dell poweredge_r430
dell poweredge_t430_firmware
dell poweredge_t430
dell poweredge_r830_firmware
dell poweredge_r830
dell poweredge_c6320_firmware
dell poweredge_c6320
dell poweredge_t130_firmware
dell poweredge_t130
dell poweredge_r230_firmware
dell poweredge_r230
dell poweredge_t330_firmware
dell poweredge_t330
dell poweredge_r330_firmware
dell poweredge_r330
dell nx3240_firmware
dell nx3240
dell nx3340_firmware
dell nx3340
dell nx3230_firmware
dell nx3230
dell nx3330_firmware
dell nx3330
dell nx430_firmware
dell nx430
dell nx440_firmware
dell nx440
dell xc_core_xc660_firmware
dell xc_core_xc660
dell xc_core_xc760_firmware
dell xc_core_xc760
dell xc_core_xc7625_firmware
dell xc_core_xc7625
dell emc_xc_core_xc450_firmware
dell emc_xc_core_xc450
dell emc_xc_core_xc650_firmware
dell emc_xc_core_xc650
dell emc_xc_core_xc750_firmware
dell emc_xc_core_xc750
dell emc_xc_core_xc750xa_firmware
dell emc_xc_core_xc750xa
dell emc_xc_core_xc6520_firmware
dell emc_xc_core_xc6520
dell emc_xc_core_xc7525_firmware
dell emc_xc_core_xc7525
dell emc_xc_core_6420_system_firmware
dell emc_xc_core_6420_system
dell emc_xc_core_xc640_system_firmware
dell emc_xc_core_xc640_system
dell emc_xc_core_xc740xd_system_firmware
dell emc_xc_core_xc740xd_system
dell emc_xc_core_xc740xd2_firmware
dell emc_xc_core_xc740xd2
dell emc_xc_core_xc940_system_firmware
dell emc_xc_core_xc940_system
dell emc_xc_core_xcxr2_firmware
dell emc_xc_core_xcxr2
dell xc6320_firmware
dell xc6320
dell xc430_firmware
dell xc430
dell xc630_firmware
dell xc630
dell xc730_firmware
dell xc730
dell xc730xd_firmware
dell xc730xd

References

Frequently Asked Questions

What is CVE-2024-0154? +
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory. It has a CVSS v3.1 base score of 3.8 (LOW).
How severe is CVE-2024-0154? +
CVE-2024-0154 has a CVSS v3.1 score of 3.8 out of 10, rated LOW. This is a low-severity vulnerability with limited impact.
What products are affected by CVE-2024-0154? +
CVE-2024-0154 affects products from dell, specifically: dss_8440, dss_8440_firmware, emc_xc_core_6420_system, emc_xc_core_6420_system_firmware, emc_xc_core_xc450, emc_xc_core_xc450_firmware, emc_xc_core_xc640_system, emc_xc_core_xc640_system_firmware, emc_xc_core_xc650, emc_xc_core_xc650_firmware, emc_xc_core_xc6520, emc_xc_core_xc6520_firmware, emc_xc_core_xc740xd2, emc_xc_core_xc740xd2_firmware, emc_xc_core_xc740xd_system, emc_xc_core_xc740xd_system_firmware, emc_xc_core_xc750, emc_xc_core_xc750_firmware, emc_xc_core_xc750xa, emc_xc_core_xc750xa_firmware, emc_xc_core_xc7525, emc_xc_core_xc7525_firmware, emc_xc_core_xc940_system, emc_xc_core_xc940_system_firmware, emc_xc_core_xcxr2, emc_xc_core_xcxr2_firmware, nx3230, nx3230_firmware, nx3240, nx3240_firmware, nx3330, nx3330_firmware, nx3340, nx3340_firmware, nx430, nx430_firmware, nx440, nx440_firmware, poweredge_c4130, poweredge_c4130_firmware, poweredge_c4140, poweredge_c4140_firmware, poweredge_c6320, poweredge_c6320_firmware, poweredge_c6420, poweredge_c6420_firmware, poweredge_c6520, poweredge_c6520_firmware, poweredge_c6525, poweredge_c6525_firmware, poweredge_c6615, poweredge_c6615_firmware, poweredge_c6620, poweredge_c6620_firmware, poweredge_fc430, poweredge_fc430_firmware, poweredge_fc630, poweredge_fc630_firmware, poweredge_fc640, poweredge_fc640_firmware, poweredge_fc830, poweredge_fc830_firmware, poweredge_hs5610, poweredge_hs5610_firmware, poweredge_hs5620, poweredge_hs5620_firmware, poweredge_m630, poweredge_m630_\(pe_vrtx\), poweredge_m630_\(pe_vrtx\)_firmware, poweredge_m630_firmware, poweredge_m640, poweredge_m640_\(pe_vrtx\), poweredge_m640_\(pe_vrtx\)_firmware, poweredge_m640_firmware, poweredge_m830, poweredge_m830_\(pe_vrtx\), poweredge_m830_\(pe_vrtx\)_firmware, poweredge_m830_firmware, poweredge_mx740c, poweredge_mx740c_firmware, poweredge_mx750c, poweredge_mx750c_firmware, poweredge_mx760c, poweredge_mx760c_firmware, poweredge_mx840c, poweredge_mx840c_firmware, poweredge_r230, poweredge_r230_firmware, poweredge_r240, poweredge_r240_firmware, poweredge_r250, poweredge_r250_firmware, poweredge_r330, poweredge_r330_firmware, poweredge_r340, poweredge_r340_firmware, poweredge_r350, poweredge_r350_firmware, poweredge_r430, poweredge_r430_firmware, poweredge_r440, poweredge_r440_firmware, poweredge_r450, poweredge_r450_firmware, poweredge_r530, poweredge_r530_firmware, poweredge_r540, poweredge_r540_firmware, poweredge_r550, poweredge_r550_firmware, poweredge_r630, poweredge_r630_firmware, poweredge_r640, poweredge_r640_firmware, poweredge_r650, poweredge_r650_firmware, poweredge_r650xs, poweredge_r650xs_firmware, poweredge_r6515, poweredge_r6515_firmware, poweredge_r6525, poweredge_r6525_firmware, poweredge_r660, poweredge_r660_firmware, poweredge_r660xs, poweredge_r660xs_firmware, poweredge_r6615, poweredge_r6615_firmware, poweredge_r6625, poweredge_r6625_firmware, poweredge_r730, poweredge_r730_firmware, poweredge_r730xd, poweredge_r730xd_firmware, poweredge_r740, poweredge_r740_firmware, poweredge_r740xd, poweredge_r740xd2, poweredge_r740xd2_firmware, poweredge_r740xd_firmware, poweredge_r750, poweredge_r750_firmware, poweredge_r750xa, poweredge_r750xa_firmware, poweredge_r750xs, poweredge_r750xs_firmware, poweredge_r7515, poweredge_r7515_firmware, poweredge_r7525, poweredge_r7525_firmware, poweredge_r760, poweredge_r760_firmware, poweredge_r760xa, poweredge_r760xa_firmware, poweredge_r760xd2, poweredge_r760xd2_firmware, poweredge_r760xs, poweredge_r760xs_firmware, poweredge_r7615, poweredge_r7615_firmware, poweredge_r7625, poweredge_r7625_firmware, poweredge_r830, poweredge_r830_firmware, poweredge_r840, poweredge_r840_firmware, poweredge_r860, poweredge_r860_firmware, poweredge_r930, poweredge_r930_firmware, poweredge_r940, poweredge_r940_firmware, poweredge_r940xa, poweredge_r940xa_firmware, poweredge_r960, poweredge_r960_firmware, poweredge_t130, poweredge_t130_firmware, poweredge_t140, poweredge_t140_firmware, poweredge_t150, poweredge_t150_firmware, poweredge_t330, poweredge_t330_firmware, poweredge_t340, poweredge_t340_firmware, poweredge_t350, poweredge_t350_firmware, poweredge_t430, poweredge_t430_firmware, poweredge_t440, poweredge_t440_firmware, poweredge_t550, poweredge_t550_firmware, poweredge_t560, poweredge_t560_firmware, poweredge_t630, poweredge_t630_firmware, poweredge_t640, poweredge_t640_firmware, poweredge_xe2420, poweredge_xe2420_firmware, poweredge_xe7420, poweredge_xe7420_firmware, poweredge_xe7440, poweredge_xe7440_firmware, poweredge_xe8545, poweredge_xe8545_firmware, poweredge_xe8640, poweredge_xe8640_firmware, poweredge_xe9640, poweredge_xe9640_firmware, poweredge_xe9680, poweredge_xe9680_firmware, poweredge_xr11, poweredge_xr11_firmware, poweredge_xr12, poweredge_xr12_firmware, poweredge_xr2, poweredge_xr2_firmware, poweredge_xr4510c, poweredge_xr4510c_firmware, poweredge_xr4520c, poweredge_xr4520c_firmware, poweredge_xr5610, poweredge_xr5610_firmware, poweredge_xr7620, poweredge_xr7620_firmware, poweredge_xr8610t, poweredge_xr8610t_firmware, poweredge_xr8620t, poweredge_xr8620t_firmware, xc430, xc430_firmware, xc630, xc630_firmware, xc6320, xc6320_firmware, xc730, xc730_firmware, xc730xd, xc730xd_firmware, xc_core_xc660, xc_core_xc660_firmware, xc_core_xc760, xc_core_xc760_firmware, xc_core_xc7625, xc_core_xc7625_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-0154? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-0154 — free, no signup required.

Start Free Scan