CVE-2024-0173: Dell Dss 8440 Firmware

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.

Affected products

Dell Dss 8440 Firmware: before 2.21.0 (fixed in 2.21.0)
Dell Emc Xc Core 6420 System Firmware: before 2.21.0 (fixed in 2.21.0)
Dell Emc Xc Core XC450 Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Emc Xc Core XC640 System Firmware: before 2.21.2 (fixed in 2.21.2)
Dell Emc Xc Core XC650 Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Emc Xc Core XC6520 Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Emc Xc Core XC740XD2 Firmware: before 2.21.1 (fixed in 2.21.1)
Dell Emc Xc Core XC740XD System Firmware: before 2.21.2 (fixed in 2.21.2)
Dell Emc Xc Core XC750 Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Emc Xc Core XC750XA Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Emc Xc Core XC7525 Firmware: before 2.14.1 (fixed in 2.14.1)
Dell Emc Xc Core XC940 System Firmware: before 2.21.2 (fixed in 2.21.2)
Dell Emc Xc Core XCXR2 Firmware: before 2.21.1 (fixed in 2.21.1)
Dell NX3230 Firmware: before 2.19.0 (fixed in 2.19.0)
Dell NX3240 Firmware: before 2.21.2 (fixed in 2.21.2)
Dell NX3330 Firmware: before 2.19.0 (fixed in 2.19.0)
Dell NX3340 Firmware: before 2.21.2 (fixed in 2.21.2)
Dell NX430 Firmware: before 2.20.0 (fixed in 2.20.0)
Dell NX440 Firmware: before 2.16.0 (fixed in 2.16.0)
Dell Poweredge c4130 Firmware: before 2.19.0 (fixed in 2.19.0)
Dell Poweredge c4140 Firmware: before 2.21.1 (fixed in 2.21.1)
Dell Poweredge c6320 Firmware: before 2.19.0 (fixed in 2.19.0)
Dell Poweredge c6420 Firmware: before 2.21.0 (fixed in 2.21.0)
Dell Poweredge c6520 Firmware: before 1.13.2 (fixed in 1.13.2)
Dell Poweredge c6525 Firmware: before 2.14.1 (fixed in 2.14.1)
and 99 more

Published 2024-03-13. Last modified 2026-06-17.