Improper input validation in Dell PowerEdge Platform
Priority LOW 30CWE-20Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00233 14th percentileScored 2026-11-07
Fix Fixed PowerEdge Platform (Dell): 2.19.0 , 2.14.0, 1.19.0
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dell | PowerEdge Platform | N/A to before 2.19.0 ; N/A to before 2.14.0; N/A to before 1.19.0 | 2.19.0 , 2.14.0, 1.19.0 | Patch available | CNA |
- PowerEdge Platform VendorDell Affected N/A to before 2.19.0 ; N/A to before 2.14.0; N/A to before 1.19.0 Fixed in 2.19.0 , 2.14.0, 1.19.0 Patch available CNA
CPE configurations NVD · 50
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:poweredge_r730_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r730:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r730xd_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r730xd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r630_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r630:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_c4130_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_c4130:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r930_firmware:*:*:*:*:*:*:*:* | before 2.14.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r930:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:poweredge_r730_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r730:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r730xd_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r730xd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r630_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r630:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_c4130_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_c4130:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r930_firmware:*:*:*:*:*:*:*:* Versions before 2.14.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r930:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Show 40 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:poweredge_m630_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_m630:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_m630_\(pe_vrtx\)_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_m630_\(pe_vrtx\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_fc630_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_fc630:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_fc430_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_fc430:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_m830_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_m830:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_m830_\(pe_vrtx\)_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_m830_\(pe_vrtx\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_fc830_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_fc830:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_t630_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_t630:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r530_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r430_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r430:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_t430_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_t430:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r830_firmware:*:*:*:*:*:*:*:* | before 1.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r830:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_c6320_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_c6320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:nx3230_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:nx3230:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:nx3330_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:nx3330:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:xc6320_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:xc6320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:xc430_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:xc430:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:xc630_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:xc630:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:xc730_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:xc730:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:xc730xd_firmware:*:*:*:*:*:*:*:* | before 2.19.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:xc730xd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:poweredge_m630_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_m630:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_m630_\(pe_vrtx\)_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_m630_\(pe_vrtx\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_fc630_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_fc630:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_fc430_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_fc430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_m830_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_m830:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_m830_\(pe_vrtx\)_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_m830_\(pe_vrtx\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_fc830_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_fc830:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_t630_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_t630:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r530_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r430_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_t430_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_t430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r830_firmware:*:*:*:*:*:*:*:* Versions before 1.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r830:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_c6320_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_c6320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:nx3230_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:nx3230:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:nx3330_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:nx3330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:xc6320_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:xc6320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:xc430_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:xc430:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:xc630_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:xc630:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:xc730_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:xc730:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:xc730xd_firmware:*:*:*:*:*:*:*:* Versions before 2.19.0 Vulnerable ·Dell
- cpe:2.3:h:dell:xc730xd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Remediation
- Fix · CNA PowerEdge Platform (Dell) Fixed in 2.19.0 , 2.14.0, 1.19.0
Timeline
- 2026-10-02 Threatist record created from CVE-2024-25942
- 2026-10-03 Alias added: GHSA-g7r6-cg59-6p4f
References
More Dell Nx3230 Firmware vulnerabilities
- TI-2023-15743 Missing authentication in Dell PowerEdge Platform CVSS 3.1HIGH 8.8
- TI-2022-15321 Memory corruption in Dell PowerEdge Platform CVSS 3.1HIGH 7.5
- TI-2022-15320 Memory corruption in Dell PowerEdge Platform CVSS 3.1HIGH 7.5
- TI-2022-15319 Memory corruption in Dell PowerEdge Platform CVSS 3.1HIGH 7.5
- TI-2022-15318 Memory corruption in Dell PowerEdge Platform CVSS 3.1HIGH 7.5
- TI-2022-15317 Memory corruption in Dell PowerEdge Platform CVSS 3.1HIGH 7.5
Sources
- CVE-2024-25942 · CVE Program
- CVE-2024-25942 · NVD
- FIRST EPSS
- GHSA-g7r6-cg59-6p4f · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences