Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0134 State: PUBLISHED Published: 2024-11-05T18:37:31.699Z Last Updated: 2024-11-05T18:52:00.366Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: NVIDIA Products: NVIDIA Container Toolkit, NVIDIA GPU Operator Problem Types: CWE-61 Description: NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
this vulnerability might lead to data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5585
CVE ID: CVE-2024-0135 State: PUBLISHED Published: 2025-01-28T03:09:02.626Z Last Updated: 2025-01-28T15:16:03.279Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Container Toolkit, NVIDIA GPU Operator Problem Types: CWE-653 Description: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.c
sclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5599
CVE ID: CVE-2024-0136 State: PUBLISHED Published: 2025-01-28T03:09:53.568Z Last Updated: 2025-01-28T15:15:51.481Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Container Toolkit, NVIDIA GPU Operator Problem Types: CWE-653 Description: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to host devices. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privilege
t way. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5599
CVE ID: CVE-2024-0137 State: PUBLISHED Published: 2025-01-28T03:10:36.813Z Last Updated: 2025-01-28T15:15:38.917Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: NVIDIA Products: NVIDIA Container Toolkit, NVIDIA GPU Operator Problem Types: CWE-653 Description: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges. Additional Analy
A successful exploit of this vulnerability may lead to denial of service and escalation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5599
CVE ID: CVE-2024-0138 State: PUBLISHED Published: 2024-11-22T23:21:31.648Z Last Updated: 2024-11-24T18:36:41.088Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Base Command Manager Problem Types: CWE-862 Description: NVIDIA Base Command Manager contains a missing authentication vulnerability in the CMDaemon component. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5595
CVE ID: CVE-2024-0139 State: PUBLISHED Published: 2024-12-06T19:37:30.345Z Last Updated: 2024-12-06T20:47:13.893Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: Base Command Manager, Bright Cluster Manager Problem Types: CWE‑377 Description: NVIDIA Base Command Manager and Bright Cluster Manager for Linux contain an insecure temporary file vulnerability. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5600
CVE ID: CVE-2024-0140 State: PUBLISHED Published: 2025-01-28T03:18:30.778Z Last Updated: 2025-01-28T15:15:30.052Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H) Vendors: NVIDIA Products: RAPIDS cuDF and cuML Problem Types: CWE-502 Description: NVIDIA RAPIDS contains a vulnerability in cuDF and cuML, where a user could cause a deserialization of untrusted data issue. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5597
CVE ID: CVE-2024-0141 State: PUBLISHED Published: 2025-03-05T01:33:55.125Z Last Updated: 2025-03-05T14:47:04.987Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA Hopper HGX 8-GPU Problem Types: CWE-782 Description: NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the GPU vBIOS that may allow a malicious actor with tenant level GPU access to write to an unsupported registry causing a bad state. A successful exploit of this vulnerability may lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5561
CVE ID: CVE-2024-0142 State: PUBLISHED Published: 2025-02-12T00:09:53.430Z Last Updated: 2025-04-05T03:55:30.749Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: NVIDIA Products: nvJPEG2000 Problem Types: CWE-787 Description: NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5596
CVE ID: CVE-2024-0143 State: PUBLISHED Published: 2025-02-12T00:10:35.133Z Last Updated: 2025-04-05T03:55:32.237Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: NVIDIA Products: nvJPEG2000 Problem Types: CWE-787 Description: NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5596
CVE ID: CVE-2024-0144 State: PUBLISHED Published: 2025-02-12T00:11:14.053Z Last Updated: 2025-04-05T03:55:33.688Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: NVIDIA Products: nvJPEG2000 Problem Types: CWE-120 Description: NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5596
CVE ID: CVE-2024-0145 State: PUBLISHED Published: 2025-02-12T00:12:33.361Z Last Updated: 2025-04-04T03:55:31.493Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: NVIDIA Products: nvJPEG2000 Problem Types: CWE-122 Description: NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause a heap-based buffer overflow issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5596
CVE ID: CVE-2024-0146 State: PUBLISHED Published: 2025-01-28T04:09:24.737Z Last Updated: 2025-01-28T15:14:22.830Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA vGPU software Problem Types: CWE-120 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause memory corruption. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, or data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5614
CVE ID: CVE-2024-0147 State: PUBLISHED Published: 2025-01-28T03:27:50.092Z Last Updated: 2025-01-28T15:20:41.498Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver, vGPU software Problem Types: CWE-416 Description: NVIDIA GPU display driver for Windows and Linux contains a vulnerability where referencing memory after it has been freed can lead to denial of service or data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5614
CVE ID: CVE-2024-0148 State: PUBLISHED Published: 2025-02-25T20:11:21.328Z Last Updated: 2025-02-25T21:20:53.416Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: IGX Orin, Jetson AGX Orin Series Problem Types: CWE-447 Description: NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A successful exploit might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. The scope of the impacts can extend to other components. Additional Analyst Notes: - CISA
e, and information disclosure. The scope of the impacts can extend to other components. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5617
CVE ID: CVE-2024-0149 State: PUBLISHED Published: 2025-01-28T04:04:19.542Z Last Updated: 2025-03-27T20:03:01.774Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: NVIDIA Products: NVIDIA GPU Display Driver, vGPU software Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files. A successful exploit of this vulnerability might lead to limited information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5614
CVE ID: CVE-2024-0150 State: PUBLISHED Published: 2025-01-28T03:26:55.489Z Last Updated: 2025-01-28T15:21:22.520Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver, vGPU software Problem Types: CWE-787 Description: NVIDIA GPU display driver for Windows and Linux contains a vulnerability where data is written past the end or before the beginning of a buffer. A successful exploit of this vulnerability might lead to information disclosure, denial of service, or data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5614
CVE ID: CVE-2024-0151 State: PUBLISHED Published: 2024-04-24T17:12:43.184Z Last Updated: 2024-08-09T18:51:26.411Z Vendors: Arm Products: Arm v8-M Security Extensions Requirements on Development Tools Problem Types: CWE-241 Description: Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to Secure state that are out of range for types smaller than 32-bits. Out of range values might lead to incorrect operations in secure state. Additional Analyst Notes: -
aller than 32-bits. Out of range values might lead to incorrect operations in secure state. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.arm.com/Arm%20Security%20Center/Cortex-M%20Security%20Extensions
CVE ID: CVE-2024-0153 State: PUBLISHED Published: 2024-07-01T09:05:40.172Z Last Updated: 2024-08-01T17:41:15.977Z Vendors: Arm Ltd Products: Valhall GPU Firmware, Arm 5th Gen GPU Architecture Firmware Problem Types: CWE-119 Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GPU Architecture Firmware allows a local non-privileged user to make improper GPU processing operations to access a limited amount outside of buffer bounds. If the operations are carefully prepared, then this in turn could give them access to all system memory. This issue affects Valhall GPU Firmware: from r29p0 through r4
this in turn could give them access to all system memory. This issue affects Valhall GPU Firmware: from r29p0 through r46p0; Arm 5th Gen GPU Architecture Firmware: from r41p0 through r46p0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE ID: CVE-2024-0154 State: PUBLISHED Published: 2024-03-13T16:41:09.360Z Last Updated: 2024-08-01T17:41:16.006Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Dell Products: PowerEdge Platform Problem Types: CWE-788 Description: Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000222898/dsa-2024-034-security-update-for-dell-poweredge-server-bi
ferences: - https://www.dell.com/support/kbdoc/en-us/000222898/dsa-2024-034-security-update-for-dell-poweredge-server-bios-for-an-improper-parameter-initialization-vulnerability
CVE ID: CVE-2024-0155 State: PUBLISHED Published: 2024-03-04T13:00:46.117Z Last Updated: 2024-09-03T20:03:10.287Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell Digital Delivery (D3) Problem Types: CWE-416 Description: Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to application crash or execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000222292/dsa-2024-033
CVE ID: CVE-2024-0156 State: PUBLISHED Published: 2024-03-04T12:54:27.226Z Last Updated: 2024-08-22T04:45:46.043Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell Digital Delivery (D3) Problem Types: CWE-122 Description: Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to arbitrary code execution and/or privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000222536/dsa-2024-032-security-update-for-dell-digital-delivery-
References: - https://www.dell.com/support/kbdoc/en-us/000222536/dsa-2024-032-security-update-for-dell-digital-delivery-for-a-buffer-overflow-vulnerability
CVE ID: CVE-2024-0157 State: PUBLISHED Published: 2024-04-12T16:59:51.179Z Last Updated: 2024-08-01T17:41:15.978Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: Dell Storage Resource Manager Problem Types: CWE-400 Description: Dell Storage Resource Manager, 4.9.0.0 and below, contain(s) a Session Fixation Vulnerability in SRM Windows Host Agent. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to the hijack of a targeted user's application session. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-nz/000224070/dsa-20
CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-nz/000224070/dsa-2024-143-dell-storage-resource-manager-srm-and-dell-storage-monitoring-and-reporting-smr-security-update-for-multiple-third-party-component-vulnerabilities
CVE ID: CVE-2024-0158 State: PUBLISHED Published: 2024-07-02T06:20:44.735Z Last Updated: 2024-08-01T17:41:16.039Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L) Vendors: Dell Products: CPG BIOS Problem Types: CWE-20 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-in/000220141/dsa-2024-030-security-update-for-dell-client-bios-for-
References: - https://www.dell.com/support/kbdoc/en-in/000220141/dsa-2024-030-security-update-for-dell-client-bios-for-an-improper-input-validation-vulnerability
CVE ID: CVE-2024-0159 State: PUBLISHED Published: 2024-04-10T07:00:09.959Z Last Updated: 2024-08-01T17:41:15.995Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Alienware Command Center (AWCC) Problem Types: CWE-1107 Description: Dell Alienware Command Center, versions 5.5.52.0 and prior, contain improper access control vulnerability, leading to Denial of Service on local system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000218222/dsa-2024-016-security-update-for-dell-alienware-command-center-vulnerabilities
CVE ID: CVE-2024-0160 State: PUBLISHED Published: 2024-06-12T06:41:33.041Z Last Updated: 2024-08-01T17:41:16.055Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-863 Description: Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000224763/dsa-2024-122
CVE ID: CVE-2024-0161 State: PUBLISHED Published: 2024-03-13T16:04:12.678Z Last Updated: 2024-08-12T13:56:29.418Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: Dell Products: PowerEdge Platform Problem Types: CWE-20 Description: Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-serv
t: References: - https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability
CVE ID: CVE-2024-0162 State: PUBLISHED Published: 2024-03-13T16:18:23.730Z Last Updated: 2024-08-01T20:17:13.932Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Dell Products: PowerEdge BIOS Intel 16G Problem Types: CWE-119 Description: Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000222812/dsa-2024-004-security-update-for-de
A ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000222812/dsa-2024-004-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability
CVE ID: CVE-2024-0163 State: PUBLISHED Published: 2024-03-13T16:28:00.444Z Last Updated: 2024-08-12T13:54:53.369Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Dell Products: PowerEdge BIOS Intel 16G Problem Types: CWE-367 Description: Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000222756/dsa-2024-003-security-update-for-dell-poweredge-server-
References: - https://www.dell.com/support/kbdoc/en-us/000222756/dsa-2024-003-security-update-for-dell-poweredge-server-bios-for-a-time-of-check-time-of-use-toctou-vulnerability
CVE ID: CVE-2024-0164 State: PUBLISHED Published: 2024-02-12T18:34:32.413Z Last Updated: 2024-08-01T17:41:15.987Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Unity Problem Types: CWE-78 Description: Dell Unity, versions prior to 5.4, contain an OS Command Injection Vulnerability in its svc_topstats utility. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary commands with elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-
References: - https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2024-0165 State: PUBLISHED Published: 2024-02-12T18:30:52.482Z Last Updated: 2025-05-06T21:04:35.561Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Unity Problem Types: CWE-78 Description: Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_acldb_dump utility. An authenticated attacker could potentially exploit this vulnerability, leading to execution of arbitrary operating system commands with root privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and
ulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities