Dell PowerEdge Server BIOS Vulnerability: Out-of-Bound SMRAM Access

CVE-2024-0162

What is CVE-2024-0162?

Dell PowerEdge Server and Precision Rack BIOS are susceptible to a vulnerability involving improper verification of System Management Mode (SMM) communication buffers. This issue allows a local low privileged attacker to potentially exploit the vulnerability, leading to unauthorized out-of-bound read and write operations to System Management RAM (SMRAM). The exploitation of this vulnerability could compromise system integrity, making it a critical concern for users managing these servers.

References