Schur

**Name of the Vulnerable Software and Affected Versions** Dell BIOS (affected versions not specified) **Description** The issue is related to an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dell PowerEdge Server BIOS (affected versions not specified) **Description** The issue is related to an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability, leading to arbitrary writes to SMRAM. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dell PowerEdge Server BIOS (affected versions not specified) **Description** The issue is related to a heap-based buffer overflow vulnerability in the Dell PowerEdge Server BIOS. A local high privileged attacker could potentially exploit this vulnerability to write to otherwise unauthorized memory, affecting the integrity and availability of the system. **Recommendations** Update BIOS to v1.19.0/2.14.0/2.19.0 as soon as possible to secure the servers.

**Name of the Vulnerable Software and Affected Versions** Dell PowerEdge Server BIOS (affected versions not specified) Dell Precision Rack BIOS (affected versions not specified) **Description** The issue is related to a flaw in the verification of the SMM communication buffer, which could allow an attacker to write arbitrary data to the System Management RAM (SMRAM). This could be exploited by a local, low-privileged attacker. **Recommendations** For Dell PowerEdge Server BIOS, update to a version that fixes the improper SMM communication buffer verification issue. For Dell Precision Rack BIOS, update to a version that fixes the improper SMM communication buffer verification issue. As a temporary workaround, consider restricting access to the SMM communication buffer to minimize the risk of exploitation.