CVE-2024-22453

HIGH
Published Mar 19, 2024 Modified Feb 4, 2025 CWE-122 CWE-787

Description

Dell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high privileged attacker could potentially exploit this vulnerability to write to otherwise unauthorized memory.

Is your site exposed to CVE-2024-22453?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.2
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H

Weakness Type (CWE)

CWE-122 CWE-122
CWE-787 Out-of-bounds Write

Affected Products

Vendor Product
dell poweredge_r730_firmware
dell poweredge_r730
dell poweredge_r730xd_firmware
dell poweredge_r730xd
dell poweredge_r630_firmware
dell poweredge_r630
dell poweredge_c4130_firmware
dell poweredge_c4130
dell poweredge_r930_firmware
dell poweredge_r930
dell poweredge_m630_firmware
dell poweredge_m630
dell poweredge_m630_\(pe_vrtx\)_firmware
dell poweredge_m630_\(pe_vrtx\)
dell poweredge_fc630_firmware
dell poweredge_fc630
dell poweredge_fc430_firmware
dell poweredge_fc430
dell poweredge_m830_firmware
dell poweredge_m830
dell poweredge_m830_\(pe_vrtx\)_firmware
dell poweredge_m830_\(pe_vrtx\)
dell poweredge_fc830_firmware
dell poweredge_fc830
dell poweredge_t630_firmware
dell poweredge_t630
dell poweredge_r530_firmware
dell poweredge_r530
dell poweredge_r430_firmware
dell poweredge_r430
dell poweredge_t430_firmware
dell poweredge_t430
dell poweredge_r830_firmware
dell poweredge_r830
dell poweredge_c6320_firmware
dell poweredge_c6320
dell nx3230_firmware
dell nx3230
dell nx3330_firmware
dell nx3330
dell xc6320_firmware
dell xc6320
dell xc430_firmware
dell xc430
dell xc630_firmware
dell xc630
dell xc730_firmware
dell xc730
dell xc730xd_firmware
dell xc730xd

References

Frequently Asked Questions

What is CVE-2024-22453? +
Dell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high privileged attacker could potentially exploit this vulnerability to write to otherwise unauthorized memory. It has a CVSS v3.1 base score of 7.2 (HIGH).
How severe is CVE-2024-22453? +
CVE-2024-22453 has a CVSS v3.1 score of 7.2 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-22453? +
CVE-2024-22453 affects products from dell, specifically: nx3230, nx3230_firmware, nx3330, nx3330_firmware, poweredge_c4130, poweredge_c4130_firmware, poweredge_c6320, poweredge_c6320_firmware, poweredge_fc430, poweredge_fc430_firmware, poweredge_fc630, poweredge_fc630_firmware, poweredge_fc830, poweredge_fc830_firmware, poweredge_m630, poweredge_m630_\(pe_vrtx\), poweredge_m630_\(pe_vrtx\)_firmware, poweredge_m630_firmware, poweredge_m830, poweredge_m830_\(pe_vrtx\), poweredge_m830_\(pe_vrtx\)_firmware, poweredge_m830_firmware, poweredge_r430, poweredge_r430_firmware, poweredge_r530, poweredge_r530_firmware, poweredge_r630, poweredge_r630_firmware, poweredge_r730, poweredge_r730_firmware, poweredge_r730xd, poweredge_r730xd_firmware, poweredge_r830, poweredge_r830_firmware, poweredge_r930, poweredge_r930_firmware, poweredge_t430, poweredge_t430_firmware, poweredge_t630, poweredge_t630_firmware, xc430, xc430_firmware, xc630, xc630_firmware, xc6320, xc6320_firmware, xc730, xc730_firmware, xc730xd, xc730xd_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-22453? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-22453 — free, no signup required.