1. Home
  2. CVE Database
  3. CVE-2024-42425
LOW · 3.8

CVE-2024-42425

Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exp...

Vulnerability Description

Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS Score

3.8

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DellPrecision 7920 Firmware< 2.22.1
DellPrecision 7920-
Dell7920 Xl Firmware< 2.22.1
Dell7920 Xl-

Related Weaknesses (CWE)

CWE-788CWE-119

References

FAQ

What is CVE-2024-42425?

CVE-2024-42425 is a vulnerability with a CVSS score of 3.8 (LOW). Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exp...

How severe is CVE-2024-42425?

CVE-2024-42425 has been rated LOW with a CVSS base score of 3.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-42425?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Precision 7920 Firmware, Dell Precision 7920, Dell 7920 Xl Firmware, Dell 7920 Xl.