CVE-2024-0162: Dell Emc Xc Core XC450 Firmware

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM.

Affected products

Dell Emc Xc Core XC450 Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Emc Xc Core XC650 Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Emc Xc Core XC6520 Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Emc Xc Core XC750 Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Emc Xc Core XC750XA Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Emc Xc Core XC7525 Firmware: before 2.14.1 (fixed in 2.14.1)
Dell Poweredge c6520 Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Poweredge c6525 Firmware: before 2.14.1 (fixed in 2.14.1)
Dell Poweredge c6615 Firmware: before 1.2.3 (fixed in 1.2.3)
Dell Poweredge c6620 Firmware: before 2.0.0 (fixed in 2.0.0)
Dell Poweredge HS5610 Firmware: before 2.0.0 (fixed in 2.0.0)
Dell Poweredge HS5620 Firmware: before 2.0.0 (fixed in 2.0.0)
Dell Poweredge MX750C Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Poweredge MX760C Firmware: before 2.0.0 (fixed in 2.0.0)
Dell Poweredge r250 Firmware: before 1.9.1 (fixed in 1.9.1)
Dell Poweredge r350 Firmware: before 1.9.1 (fixed in 1.9.1)
Dell Poweredge r450 Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Poweredge r550 Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Poweredge r650 Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Poweredge r650xs Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Poweredge r6515 Firmware: before 2.14.1 (fixed in 2.14.1)
Dell Poweredge r6525 Firmware: before 2.14.1 (fixed in 2.14.1)
Dell Poweredge r660 Firmware: before 2.0.0 (fixed in 2.0.0)
Dell Poweredge r660xs Firmware: before 2.0.0 (fixed in 2.0.0)
Dell Poweredge r6615 Firmware: before 1.7.2 (fixed in 1.7.2)
and 33 more

Published 2024-03-13. Last modified 2026-06-17.