Dell Poweredge r440 Firmware vulnerabilities

10 CVEs affecting Dell Poweredge r440 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-26482, published 2025-09-25.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-21557, published 2021-06-14. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this…
• CVE-2025-26482, published 2025-09-25. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability,…
• CVE-2024-0161, published 2024-03-13. High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this…
• CVE-2024-0154, published 2024-03-13. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to…
• CVE-2023-32460, published 2023-12-08. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege…
• CVE-2023-25537, published 2023-05-22. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could…
• CVE-2024-0173, published 2024-03-13. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to…
• CVE-2024-38304, published 2024-08-29. Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could…
• CVE-2024-0172, published 2024-04-03. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this…
• CVE-2024-38303, published 2024-08-29. Medium severity, CVSS 6.0. EPSS: 0.1% chance of exploitation in the next 30 days. Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Improper Input Validation vulnerability. A high privileged attacker with local access could potentially exploit this…