Out-of-bounds write in Dell products - CVE-2023-25537

Vulnerability identifier: #VU76168

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-25537

CWE-ID: CWE-787

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in System Management Mode. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

PowerEdge M640 (for PE VRTX)
Dell EMC XC Core XCXR2
Dell EMC XC Core XC940 System
Dell EMC XC Core XC740xd2
Dell EMC XC Core XC740xd System
Dell EMC XC Core XC640 System
Dell EMC XC Core 6420 System
Dell EMC Storage NX3340
Dell EMC Storage NX3240
PowerEdge XE7440
PowerEdge XE7420
PowerEdge XE2420
DSS 8440
PowerEdge C4140
PowerEdge MX840C
PowerEdge MX740C
PowerEdge R740
PowerEdge M640
PowerEdge FC640
PowerEdge C6420
PowerEdge T640
PowerEdge R940XA
PowerEdge R840
PowerEdge R740XD2
PowerEdge XR2
PowerEdge T440
PowerEdge R440
PowerEdge R540
PowerEdge R940
PowerEdge R640
PowerEdge R740XD
Precision 7920 Rack
PowerScale OneFS
Avamar Data Store Gen5A
Disk Library for mainframe (DLm)

Install updates from vendor's website.

PowerEdge M640 (for PE VRTX) - update to 2.18.1
Dell EMC XC Core XCXR2 - update to 2.18.1
Dell EMC XC Core XC940 System - update to 2.18.1
Dell EMC XC Core XC740xd2 - update to 2.18.1
Dell EMC XC Core XC740xd System - update to 2.18.1
Dell EMC XC Core XC640 System - update to 2.18.1
Dell EMC XC Core 6420 System - update to 2.18.1
Dell EMC Storage NX3340 - update to 2.18.1
Dell EMC Storage NX3240 - update to 2.18.1
PowerEdge XE7440 - update to 2.18.1
PowerEdge XE7420 - update to 2.18.1
PowerEdge XE2420 - update to 2.18.1
DSS 8440 - update to 2.18.1
PowerEdge C4140 - update to 2.18.1
PowerEdge MX840C - update to 2.18.1
PowerEdge MX740C - update to 2.18.1
PowerEdge R740 - update to 2.18.1
PowerEdge M640 - update to 2.18.1
PowerEdge FC640 - update to 2.18.1
PowerEdge C6420 - update to 2.18.1
PowerEdge T640 - update to 2.18.1
PowerEdge R940XA - update to 2.18.1
PowerEdge R840 - update to 2.18.1
PowerEdge R740XD2 - update to 2.18.1
PowerEdge XR2 - update to 2.18.1
PowerEdge T440 - update to 2.18.1
PowerEdge R440 - update to 2.18.1
PowerEdge R540 - update to 2.18.1
PowerEdge R940 - update to 2.18.1
PowerEdge R640 - update to 2.18.1
PowerEdge R740XD - update to 2.18.1
Precision 7920 Rack - update to 2.18.1
Avamar Data Store Gen5A - update to 2.18.1
Disk Library for mainframe (DLm) - update to 5.5.0.4
PowerScale OneFS - update to 12.0

• https://www.dell.com/support/kbdoc/nl-nl/000213550/dsa-2023-098-security-update-for-dell-poweredge-14g-server-bios-for-an-out-of-bounds-write-vulnerability

• Privilege escalation in Dell PowerEdge 14G Server BIOS
• Privilege escalation in Dell Precision 7920 Rack and 7920 XL Rack
• Multiple vulnerabilities in Dell Disk Library for mainframe (DLm)
• Multiple vulnerabilities in Dell PowerScale OneFS
• Multiple vulnerabilities in Dell Avamar Data Store Gen5a