CVE & CISA-KEV CatalogNVD
CVE-2024-0154
LOW3.8
CVSS v3
Description
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.
How to fix
Remediation Available
dss 8440 firmwareNVD
emc xc core 6420 system firmwareNVD
emc xc core xc450 firmwareNVD
emc xc core xc640 system firmwareNVD
emc xc core xc650 firmwareNVD
emc xc core xc6520 firmwareNVD
emc xc core xc740xd2 firmwareNVD
emc xc core xc740xd system firmwareNVD
emc xc core xc750 firmwareNVD
emc xc core xc750xa firmwareNVD
emc xc core xc7525 firmwareNVD
emc xc core xc940 system firmwareNVD
emc xc core xcxr2 firmwareNVD
nx3230 firmwareNVD
nx3240 firmwareNVD
nx3330 firmwareNVD
nx3340 firmwareNVD
nx430 firmwareNVD
nx440 firmwareNVD
poweredge c4130 firmwareNVD
poweredge c4140 firmwareNVD
poweredge c6320 firmwareNVD
poweredge c6420 firmwareNVD
poweredge c6520 firmwareNVD
poweredge c6525 firmwareNVD
poweredge c6615 firmwareNVD
poweredge c6620 firmwareNVD
poweredge fc430 firmwareNVD
poweredge fc630 firmwareNVD
poweredge fc640 firmwareNVD
poweredge fc830 firmwareNVD
poweredge hs5610 firmwareNVD
poweredge hs5620 firmwareNVD
poweredge m630 \(pe vrtx\) firmwareNVD
poweredge m630 firmwareNVD
poweredge m640 \(pe vrtx\) firmwareNVD
poweredge m640 firmwareNVD
poweredge m830 \(pe vrtx\) firmwareNVD
poweredge m830 firmwareNVD
poweredge mx740c firmwareNVD
poweredge mx750c firmwareNVD
poweredge mx760c firmwareNVD
poweredge mx840c firmwareNVD
poweredge r230 firmwareNVD
poweredge r240 firmwareNVD
poweredge r250 firmwareNVD
poweredge r330 firmwareNVD
poweredge r340 firmwareNVD
poweredge r350 firmwareNVD
poweredge r430 firmwareNVD
poweredge r440 firmwareNVD
poweredge r450 firmwareNVD
poweredge r530 firmwareNVD
poweredge r540 firmwareNVD
poweredge r550 firmwareNVD
poweredge r630 firmwareNVD
poweredge r640 firmwareNVD
poweredge r650 firmwareNVD
poweredge r650xs firmwareNVD
poweredge r6515 firmwareNVD
poweredge r6525 firmwareNVD
poweredge r660 firmwareNVD
poweredge r660xs firmwareNVD
poweredge r6615 firmwareNVD
poweredge r6625 firmwareNVD
poweredge r730 firmwareNVD
poweredge r730xd firmwareNVD
poweredge r740 firmwareNVD
poweredge r740xd2 firmwareNVD
poweredge r740xd firmwareNVD
poweredge r750 firmwareNVD
poweredge r750xa firmwareNVD
poweredge r750xs firmwareNVD
poweredge r7515 firmwareNVD
poweredge r7525 firmwareNVD
poweredge r760 firmwareNVD
poweredge r760xa firmwareNVD
poweredge r760xd2 firmwareNVD
poweredge r760xs firmwareNVD
poweredge r7615 firmwareNVD
poweredge r7625 firmwareNVD
poweredge r830 firmwareNVD
poweredge r840 firmwareNVD
poweredge r860 firmwareNVD
poweredge r930 firmwareNVD
poweredge r940 firmwareNVD
poweredge r940xa firmwareNVD
poweredge r960 firmwareNVD
poweredge t130 firmwareNVD
poweredge t140 firmwareNVD
poweredge t150 firmwareNVD
poweredge t330 firmwareNVD
poweredge t340 firmwareNVD
poweredge t350 firmwareNVD
poweredge t430 firmwareNVD
poweredge t440 firmwareNVD
poweredge t550 firmwareNVD
poweredge t560 firmwareNVD
poweredge t630 firmwareNVD
poweredge t640 firmwareNVD
poweredge xe2420 firmwareNVD
poweredge xe7420 firmwareNVD
poweredge xe7440 firmwareNVD
poweredge xe8545 firmwareNVD
poweredge xe8640 firmwareNVD
poweredge xe9640 firmwareNVD
poweredge xe9680 firmwareNVD
poweredge xr11 firmwareNVD
poweredge xr12 firmwareNVD
poweredge xr2 firmwareNVD
poweredge xr4510c firmwareNVD
poweredge xr4520c firmwareNVD
poweredge xr5610 firmwareNVD
poweredge xr7620 firmwareNVD
poweredge xr8610t firmwareNVD
poweredge xr8620t firmwareNVD
xc430 firmwareNVD
xc630 firmwareNVD
xc6320 firmwareNVD
xc730 firmwareNVD
xc730xd firmwareNVD
xc core xc660 firmwareNVD
xc core xc760 firmwareNVD
xc core xc7625 firmwareNVD
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeChanged
Impact
ConfidentialityLow
IntegrityNone
AvailabilityNone
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Exploit Intelligence
0.20%probability of exploitation in 30 days
10thpercentile
Low risk: more likely to be exploited than 10% of all known CVEs.
References
Vendor Advisory1
Embed a live status badge for CVE-2024-0154
Markdown
[](https://tridentstack.com/cve/CVE-2024-0154)HTML
<a href="https://tridentstack.com/cve/CVE-2024-0154"><img src="https://tridentstack.com/cve/badge/CVE-2024-0154.svg" alt="CVE-2024-0154"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-01-31.