CVE-2024-25942: Dell NX3230 Firmware

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.

Affected products

• Dell NX3230 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell NX3330 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge c4130 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge c6320 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge FC430 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge FC630 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge FC830 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge m630 (pe Vrtx) Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge m630 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge m830 (pe Vrtx) Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge m830 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge r430 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge r530 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge r630 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge r730 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge r730xd Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge r830 Firmware: before 1.19.0 (fixed in 1.19.0)
• Dell Poweredge r930 Firmware: before 2.14.0 (fixed in 2.14.0)
• Dell Poweredge t430 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell Poweredge t630 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell XC430 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell XC630 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell XC6320 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell XC730 Firmware: before 2.19.0 (fixed in 2.19.0)
• Dell XC730XD Firmware: before 2.19.0 (fixed in 2.19.0)

Published 2024-03-19. Last modified 2026-06-17.