Medium severity6.1NVD Advisory· Published May 22, 2023· Updated Jun 17, 2026
CVE-2023-25537
CVE-2023-25537
Description
Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Out of Bounds write vulnerability. A local attacker with low privileges could potentially exploit this vulnerability leading to exposure of some SMRAM stack/data/code in System Management Mode, leading to arbitrary code execution or escalation of privilege.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
33- cpe:2.3:o:dell:emc_storage_nx3240_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:emc_storage_nx3340_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:emc_xc_core_6420_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:emc_xc_core_xc640_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:emc_xc_core_xc740xd2_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:emc_xc_core_xc740xd_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:emc_xc_core_xc940_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:emc_xc_core_xcxr2_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:poweredge_mx740c_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:poweredge_mx840c_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:poweredge_r740xd2_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:poweredge_r740xd_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:poweredge_r940xa_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:poweredge_xe2420_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:poweredge_xe7420_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- cpe:2.3:o:dell:poweredge_xe7440_firmware:*:*:*:*:*:*:*:*Range: <2.18.1
- Range: <2.18.2
- Range: <2.18.1
- Range: Versions prior to 2.18.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.