← Database

CVE-2023-25537

MEDIUM CVSS: 6.1 Published: 2023-05-22 Modified: 2026-06-17

Description

Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege.

Affected Platforms

Dell Poweredge C4140 FirmwareDell Poweredge C6420 FirmwareDell Poweredge M640 FirmwareDell Poweredge C4140Dell Poweredge Xe7440 FirmwareDell Emc Xc Core Xc740Xd2Dell Poweredge Fc640Dell Poweredge T440 FirmwareDell Poweredge R540 FirmwareDell Poweredge M640

Weakness Type

CWE-787

References