CVE-2024-38304: Dell Dss 8440 Firmware

Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

Affected products

  • Dell Dss 8440 Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Emc Storage NX3240 Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Emc Storage NX3340 Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Emc Xc Core 6420 System Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Emc Xc Core XC640 System Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Emc Xc Core XC740XD2 Firmware: before 2.22.1 (fixed in 2.22.1)
  • Dell Emc Xc Core XC740XD System Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Emc Xc Core XC940 System Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Emc Xc Core XCXR2 Firmware: before 2.22.1 (fixed in 2.22.1)
  • Dell Poweredge c4140 Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Poweredge c6420 Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Poweredge FC640 Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Poweredge m640 (for Pe Vrtx) Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Poweredge m640 Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Poweredge MX740C Firmware: before 2.22.1 (fixed in 2.22.1)
  • Dell Poweredge MX840C Firmware: before 2.22.1 (fixed in 2.22.1)
  • Dell Poweredge r440 Firmware: before 2.22.1 (fixed in 2.22.1)
  • Dell Poweredge r540 Firmware: before 2.22.1 (fixed in 2.22.1)
  • Dell Poweredge r640 Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Poweredge r740 Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Poweredge r740xd2 Firmware: before 2.22.1 (fixed in 2.22.1)
  • Dell Poweredge r740xd Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Poweredge r840 Firmware: before 2.22.1 (fixed in 2.22.1)
  • Dell Poweredge r940 Firmware: before 2.22.2 (fixed in 2.22.2)
  • Dell Poweredge r940xa Firmware: before 2.22.1 (fixed in 2.22.1)
  • and 6 more

Published 2024-08-29. Last modified 2026-06-17.