cveboard RSS feed

CVE-2023-25537

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

PowerEdge Platform

Vendor
Dell
Product
PowerEdge Platform
Platforms
  • BIOS
  • PowerEdge R740
  • PowerEdge R740XD
  • PowerEdge R640
  • PowerEdge R940
  • PowerEdge R540
  • PowerEdge R440
  • PowerEdge T440
  • PowerEdge XR2
  • PowerEdge R740xD2
  • PowerEdge R840
  • PowerEdge R940xa
  • PowerEdge T640
  • PowerEdge C6420
  • PowerEdge FC640
  • PowerEdge M640
  • PowerEdge M640 (for PE VRTX)
  • PowerEdge MX740c
  • PowerEdge MX840c
  • PowerEdge C4140
  • DSS 8440
  • PowerEdge XE2420
  • PowerEdge XE7420
  • PowerEdge XE7440
  • Dell EMC Storage NX3240
  • Dell EMC Storage NX3340
  • Dell EMC XC Core 6420 System
  • Dell EMC XC Core XC640 System
  • Dell EMC XC Core XC740xd System
  • Dell EMC XC Core XC740xd2
  • Dell EMC XC Core XC940 System
  • Dell EMC XC Core XCXR2
Default status
unaffected
PowerEdge Platform · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
Versions prior to 2.18.1 affectedUnavailableUnavailableUnavailableNone listed