CVE-2023-25537: Dell Dss 8440 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege.

Affected products

  • Dell Dss 8440 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Emc Storage NX3240 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Emc Storage NX3340 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Emc Xc Core 6420 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Emc Xc Core XC640 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Emc Xc Core XC740XD2 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Emc Xc Core XC740XD Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Emc Xc Core XC940 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Emc Xc Core XCXR2 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge c4140 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge c6420 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge FC640 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge m640 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge MX740C Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge MX840C Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge r440 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge r540 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge r640 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge r740 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge r740xd2 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge r740xd Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge r840 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge r940 Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge r940xa Firmware: before 2.18.1 (fixed in 2.18.1)
  • Dell Poweredge t440 Firmware: before 2.18.1 (fixed in 2.18.1)
  • and 5 more

Published 2023-05-22. Last modified 2026-06-17.