DSA-2024-167: Security Update for Dell PowerEdge T30/T40 Mini Tower Server for an Improper Input Validation Vulnerability
Résumé: Dell PowerEdge T30/T40 Mini Tower Server remediation is available for an Improper Input Validation vulnerability that could be exploited by malicious users to compromise the affected systems. ...
Cet article concerne
Cet article ne concerne pas
Cet article n’est associé à aucun produit spécifique.
Toutes les versions du produit ne sont pas identifiées dans cet article.
Impact
Medium
Détails
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-0158 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges. | 5.1 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2024-0158 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges. | 5.1 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L |
Produits concernés et mesure corrective
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| PowerEdge T30 | BIOS | Versions prior to 1.15.0 | Version 1.15.0 or later | https://www.dell.com/support/home/product-support/product/poweredge-t30/drivers |
| PowerEdge T40 | BIOS | Versions prior to 1.16.0 | Version 1.16.0 or later | https://www.dell.com/support/home/product-support/product/poweredge-t40/drivers |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| PowerEdge T30 | BIOS | Versions prior to 1.15.0 | Version 1.15.0 or later | https://www.dell.com/support/home/product-support/product/poweredge-t30/drivers |
| PowerEdge T40 | BIOS | Versions prior to 1.16.0 | Version 1.16.0 or later | https://www.dell.com/support/home/product-support/product/poweredge-t40/drivers |
Solutions de contournement et mesures d’atténuation
None
Historique des révisions
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-04-09 | Initial release |
| 2.0 | 2024-05-22 | Added the downloadable link for PowerEdge T30 |
| 3.0 | 2024-06-13 | Updated for enhanced presentation with no changes to content |
| 4.0 | 2024-11-08 | Updated for enhanced presentation with no changes to content |
Informations connexes
Mention légale
Produits concernés
PowerEdge T30, PowerEdge T40Propriétés de l’article
Numéro d’article: 000223962
Type d’article: Dell Security Advisory
Dernière modification: 08 nov. 2024
Trouvez des réponses à vos questions auprès d’autres utilisateurs Dell
Services de support
Vérifiez si votre appareil est couvert par les services de support.