CVE-2024-0161: Dell Dss 8440 Firmware

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.

Affected products

  • Dell Dss 8440 Firmware: before 2.21.0 (fixed in 2.21.0)
  • Dell Emc Storage NX3240 Firmware: before 2.21.2 (fixed in 2.21.2)
  • Dell Emc Storage NX3340 Firmware: before 2.21.2 (fixed in 2.21.2)
  • Dell Emc Xc Core 6420 Firmware: before 2.21.0 (fixed in 2.21.0)
  • Dell Emc Xc Core XC450 Firmware: before 1.13.2 (fixed in 1.13.2)
  • Dell Emc Xc Core XC640 Firmware: before 2.21.2 (fixed in 2.21.2)
  • Dell Emc Xc Core XC650 Firmware: before 1.13.2 (fixed in 1.13.2)
  • Dell Emc Xc Core XC6520 Firmware: before 1.13.2 (fixed in 1.13.2)
  • Dell Emc Xc Core XC740XD2 Firmware: before 2.21.1 (fixed in 2.21.1)
  • Dell Emc Xc Core XC740XD Firmware: before 2.21.2 (fixed in 2.21.2)
  • Dell Emc Xc Core XC750 Firmware: before 1.13.2 (fixed in 1.13.2)
  • Dell Emc Xc Core XC750XA Firmware: before 1.13.2 (fixed in 1.13.2)
  • Dell Emc Xc Core XC940 Firmware: before 2.21.2 (fixed in 2.21.2)
  • Dell Emc Xc Core XCXR2 Firmware: before 2.21.1 (fixed in 2.21.1)
  • Dell Poweredge c4130 Firmware: before 2.19.0 (fixed in 2.19.0)
  • Dell Poweredge c4140 Firmware: before 2.21.1 (fixed in 2.21.1)
  • Dell Poweredge c6320 Firmware: before 2.19.0 (fixed in 2.19.0)
  • Dell Poweredge c6420 Firmware: before 2.21.0 (fixed in 2.21.0)
  • Dell Poweredge c6520 Firmware: before 1.13.2 (fixed in 1.13.2)
  • Dell Poweredge FC430 Firmware: before 2.19.0 (fixed in 2.19.0)
  • Dell Poweredge FC630 Firmware: before 2.19.0 (fixed in 2.19.0)
  • Dell Poweredge FC640 Firmware: before 2.21.0 (fixed in 2.21.0)
  • Dell Poweredge FC830 Firmware: before 2.19.0 (fixed in 2.19.0)
  • Dell Poweredge m630 (pe Vrtx) Firmware: before 2.19.0 (fixed in 2.19.0)
  • Dell Poweredge m630 Firmware: before 2.19.0 (fixed in 2.19.0)
  • and 61 more

Published 2024-03-13. Last modified 2026-06-17.