Out-of-bounds write in Dell PowerEdge Platform
Priority LOW 35CWE-787Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.
Summary
Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0018 7th percentileScored 2026-11-07
Fix Fixed PowerEdge Platform (Dell): 2.18.1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dell | PowerEdge Platform | before 2.18.1 | 2.18.1 | Patch available | CNA |
- PowerEdge Platform VendorDell Affected before 2.18.1 Fixed in 2.18.1 Patch available CNA
CPE configurations NVD · 60
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:poweredge_r740_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r740:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r740xd_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r740xd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r640_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r640:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r940_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r940:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r540_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r540:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:poweredge_r740_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r740:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r740xd_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r740xd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r640_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r640:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r940_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r940:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r540_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r540:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Show 50 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:poweredge_r440_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r440:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_t440_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_t440:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_xr2_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_xr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r740xd2_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r740xd2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r840_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r840:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r940xa_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r940xa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_t640_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_t640:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_c6420_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_c6420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_fc640_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_fc640:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_m640_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_m640:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_mx740c_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_mx740c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_mx840c_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_mx840c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_c4140_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_c4140:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:dss_8440_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:dss_8440:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_xe2420_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_xe2420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_xe7420_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_xe7420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_xe7440_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_xe7440:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:emc_storage_nx3240_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:emc_storage_nx3240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:emc_storage_nx3340_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:emc_storage_nx3340:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:emc_xc_core_6420_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:emc_xc_core_6420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:emc_xc_core_xc640_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:emc_xc_core_xc640:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:emc_xc_core_xc740xd_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:emc_xc_core_xc740xd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:emc_xc_core_xc740xd2_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:emc_xc_core_xc740xd2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:emc_xc_core_xc940_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:emc_xc_core_xc940:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:emc_xc_core_xcxr2_firmware:*:*:*:*:*:*:*:* | before 2.18.1 | Vulnerable | Dell |
| cpe:2.3:h:dell:emc_xc_core_xcxr2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:poweredge_r440_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r440:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_t440_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_t440:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_xr2_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_xr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r740xd2_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r740xd2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r840_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r840:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r940xa_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r940xa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_t640_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_t640:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_c6420_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_c6420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_fc640_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_fc640:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_m640_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_m640:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_mx740c_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_mx740c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_mx840c_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_mx840c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_c4140_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_c4140:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:dss_8440_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:dss_8440:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_xe2420_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_xe2420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_xe7420_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_xe7420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_xe7440_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_xe7440:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:emc_storage_nx3240_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:emc_storage_nx3240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:emc_storage_nx3340_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:emc_storage_nx3340:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:emc_xc_core_6420_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:emc_xc_core_6420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:emc_xc_core_xc640_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:emc_xc_core_xc640:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:emc_xc_core_xc740xd_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:emc_xc_core_xc740xd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:emc_xc_core_xc740xd2_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:emc_xc_core_xc740xd2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:emc_xc_core_xc940_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:emc_xc_core_xc940:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:emc_xc_core_xcxr2_firmware:*:*:*:*:*:*:*:* Versions before 2.18.1 Vulnerable ·Dell
- cpe:2.3:h:dell:emc_xc_core_xcxr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Remediation
- Fix · CNA PowerEdge Platform (Dell) Fixed in 2.18.1
Timeline
- 2026-10-02 Threatist record created from CVE-2023-25537
- 2026-10-03 Alias added: GHSA-f88f-9mmf-7xm6
References
More Dell Dss 8440 Firmware vulnerabilities
- TI-2023-15743 Missing authentication in Dell PowerEdge Platform CVSS 3.1HIGH 8.8
- TI-2024-00149 Improper input validation in Dell PowerEdge Platform CVSS 3.1HIGH 8.4
- TI-2024-00160 Improper privilege management in Dell PowerEdge Platform CVSS 3.1HIGH 7.9
- TI-2024-25578 Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of… CVSS 3.1MEDIUM 6.5
- TI-2024-25577 Improper input validation in Dell PowerEdge Platform CVSS 3.1MEDIUM 6.0
- TI-2025-19429 Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information… CVSS 3.1MEDIUM 4.9
Sources
- CVE-2023-25537 · CVE Program
- CVE-2023-25537 · NVD
- FIRST EPSS
- GHSA-f88f-9mmf-7xm6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences