Dell Poweredge m830 Firmware vulnerabilities

6 CVEs affecting Dell Poweredge m830 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-25942, published 2024-03-19.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-25942, published 2024-03-19. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to…
• CVE-2024-0161, published 2024-03-13. High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this…
• CVE-2024-0154, published 2024-03-13. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to…
• CVE-2023-32460, published 2023-12-08. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege…
• CVE-2024-22453, published 2024-03-19. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high privileged attacker could potentially exploit this vulnerability to write to otherwise unauthorized memory.
• CVE-2024-0173, published 2024-03-13. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to…