Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-38304 Details

Description

Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CNA: [email protected]CVSS-B:3.8 LOWVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.dell.com/support/kbdoc/en-us/000228137/dsa-2024-310-security-update-for-dell-poweredge-server-for-access-of-memory-location-after-end-of-buffer-vulnerability	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]
CWE-788	Access of Memory Location After End of Buffer	[email protected]

Affected Products

Product	Versions
dell emc xc core xcxr2 firmware	< 2.22.1
CPE cpe:2.3:o:dell:emc_xc_core_xcxr2_firmware:::::::: Remediation No remediation found in references.
dell emc xc core xcxr2	All versions
CPE cpe:2.3:h:dell:emc_xc_core_xcxr2:-:::::::* Remediation No remediation found in references.
dell emc xc core xc940 system firmware	< 2.22.2
CPE cpe:2.3:o:dell:emc_xc_core_xc940_system_firmware:::::::: Remediation No remediation found in references.
dell emc xc core xc940 system	All versions
CPE cpe:2.3:h:dell:emc_xc_core_xc940_system:-:::::::* Remediation No remediation found in references.
dell emc xc core xc740xd2 firmware	< 2.22.1
CPE cpe:2.3:o:dell:emc_xc_core_xc740xd2_firmware:::::::: Remediation No remediation found in references.
dell emc xc core xc740xd2	All versions
CPE cpe:2.3:h:dell:emc_xc_core_xc740xd2:-:::::::* Remediation No remediation found in references.
dell emc xc core xc740xd system firmware	< 2.22.2
CPE cpe:2.3:o:dell:emc_xc_core_xc740xd_system_firmware:::::::: Remediation No remediation found in references.
dell emc xc core xc740xd system	All versions
CPE cpe:2.3:h:dell:emc_xc_core_xc740xd_system:-:::::::* Remediation No remediation found in references.
dell emc xc core xc640 system firmware	< 2.22.2
CPE cpe:2.3:o:dell:emc_xc_core_xc640_system_firmware:::::::: Remediation No remediation found in references.
dell emc xc core xc640 system	All versions
CPE cpe:2.3:h:dell:emc_xc_core_xc640_system:-:::::::* Remediation No remediation found in references.
dell emc xc core 6420 system firmware	< 2.22.2
CPE cpe:2.3:o:dell:emc_xc_core_6420_system_firmware:::::::: Remediation No remediation found in references.
dell emc xc core 6420 system	All versions
CPE cpe:2.3:h:dell:emc_xc_core_6420_system:-:::::::* Remediation No remediation found in references.
dell emc storage nx3340 firmware	< 2.22.2
CPE cpe:2.3:o:dell:emc_storage_nx3340_firmware:::::::: Remediation No remediation found in references.
dell emc storage nx3340	All versions
CPE cpe:2.3:h:dell:emc_storage_nx3340:-:::::::* Remediation No remediation found in references.
dell emc storage nx3240 firmware	< 2.22.2
CPE cpe:2.3:o:dell:emc_storage_nx3240_firmware:::::::: Remediation No remediation found in references.
dell emc storage nx3240	All versions
CPE cpe:2.3:h:dell:emc_storage_nx3240:-:::::::* Remediation No remediation found in references.
dell poweredge xe7440 firmware	< 2.22.2
CPE cpe:2.3:o:dell:poweredge_xe7440_firmware:::::::: Remediation No remediation found in references.
dell poweredge xe7440	All versions
CPE cpe:2.3:h:dell:poweredge_xe7440:-:::::::* Remediation No remediation found in references.
dell poweredge xe7420 firmware	< 2.22.2
CPE cpe:2.3:o:dell:poweredge_xe7420_firmware:::::::: Remediation No remediation found in references.
dell poweredge xe7420	All versions
CPE cpe:2.3:h:dell:poweredge_xe7420:-:::::::* Remediation No remediation found in references.
dell poweredge xe2420 firmware	< 2.22.2
CPE cpe:2.3:o:dell:poweredge_xe2420_firmware:::::::: Remediation No remediation found in references.
dell poweredge xe2420	All versions
CPE cpe:2.3:h:dell:poweredge_xe2420:-:::::::* Remediation No remediation found in references.
dell dss 8440 firmware	< 2.22.2
CPE cpe:2.3:o:dell:dss_8440_firmware:::::::: Remediation No remediation found in references.
dell dss 8440	All versions
CPE cpe:2.3:h:dell:dss_8440:-:::::::* Remediation No remediation found in references.
dell poweredge c4140 firmware	< 2.22.2
CPE cpe:2.3:o:dell:poweredge_c4140_firmware:::::::: Remediation No remediation found in references.
dell poweredge c4140	All versions
CPE cpe:2.3:h:dell:poweredge_c4140:-:::::::* Remediation No remediation found in references.
dell poweredge mx840c firmware	< 2.22.1
CPE cpe:2.3:o:dell:poweredge_mx840c_firmware:::::::: Remediation No remediation found in references.
dell poweredge mx840c	All versions
CPE cpe:2.3:h:dell:poweredge_mx840c:-:::::::* Remediation No remediation found in references.
dell poweredge mx740c firmware	< 2.22.1
CPE cpe:2.3:o:dell:poweredge_mx740c_firmware:::::::: Remediation No remediation found in references.
dell poweredge mx740c	All versions
CPE cpe:2.3:h:dell:poweredge_mx740c:-:::::::* Remediation No remediation found in references.
dell poweredge m640 (for pe vrtx) firmware	< 2.22.2
CPE cpe:2.3:o:dell:poweredge_m640_(for_pe_vrtx)_firmware:::::::: Remediation No remediation found in references.
dell poweredge m640 (for pe vrtx)	All versions
CPE cpe:2.3:h:dell:poweredge_m640_(for_pe_vrtx):-:::::::* Remediation No remediation found in references.
dell poweredge m640 firmware	< 2.22.2
CPE cpe:2.3:o:dell:poweredge_m640_firmware:::::::: Remediation No remediation found in references.
dell poweredge m640	All versions
CPE cpe:2.3:h:dell:poweredge_m640:-:::::::* Remediation No remediation found in references.
dell poweredge fc640 firmware	< 2.22.2
CPE cpe:2.3:o:dell:poweredge_fc640_firmware:::::::: Remediation No remediation found in references.
dell poweredge fc640	All versions
CPE cpe:2.3:h:dell:poweredge_fc640:-:::::::* Remediation No remediation found in references.
dell poweredge c6420 firmware	< 2.22.2
CPE cpe:2.3:o:dell:poweredge_c6420_firmware:::::::: Remediation No remediation found in references.
dell poweredge c6420	All versions
CPE cpe:2.3:h:dell:poweredge_c6420:-:::::::* Remediation No remediation found in references.
dell poweredge t640 firmware	< 2.22.1
CPE cpe:2.3:o:dell:poweredge_t640_firmware:::::::: Remediation No remediation found in references.
dell poweredge t640	All versions
CPE cpe:2.3:h:dell:poweredge_t640:-:::::::* Remediation No remediation found in references.
dell poweredge r940xa firmware	< 2.22.1
CPE cpe:2.3:o:dell:poweredge_r940xa_firmware:::::::: Remediation No remediation found in references.
dell poweredge r940xa	All versions
CPE cpe:2.3:h:dell:poweredge_r940xa:-:::::::* Remediation No remediation found in references.
dell poweredge r840 firmware	< 2.22.1
CPE cpe:2.3:o:dell:poweredge_r840_firmware:::::::: Remediation No remediation found in references.
dell poweredge r840	All versions
CPE cpe:2.3:h:dell:poweredge_r840:-:::::::* Remediation No remediation found in references.
dell poweredge r740xd2 firmware	< 2.22.1
CPE cpe:2.3:o:dell:poweredge_r740xd2_firmware:::::::: Remediation No remediation found in references.
dell poweredge r740xd2	All versions
CPE cpe:2.3:h:dell:poweredge_r740xd2:-:::::::* Remediation No remediation found in references.
dell poweredge xr2 firmware	< 2.22.1
CPE cpe:2.3:o:dell:poweredge_xr2_firmware:::::::: Remediation No remediation found in references.
dell poweredge xr2	All versions
CPE cpe:2.3:h:dell:poweredge_xr2:-:::::::* Remediation No remediation found in references.
dell poweredge t440 firmware	< 2.22.1
CPE cpe:2.3:o:dell:poweredge_t440_firmware:::::::: Remediation No remediation found in references.
dell poweredge t440	All versions
CPE cpe:2.3:h:dell:poweredge_t440:-:::::::* Remediation No remediation found in references.
dell poweredge r440 firmware	< 2.22.1
CPE cpe:2.3:o:dell:poweredge_r440_firmware:::::::: Remediation No remediation found in references.
dell poweredge r440	All versions
CPE cpe:2.3:h:dell:poweredge_r440:-:::::::* Remediation No remediation found in references.
dell poweredge r540 firmware	< 2.22.1
CPE cpe:2.3:o:dell:poweredge_r540_firmware:::::::: Remediation No remediation found in references.
dell poweredge r540	All versions
CPE cpe:2.3:h:dell:poweredge_r540:-:::::::* Remediation No remediation found in references.
dell poweredge r940 firmware	< 2.22.2
CPE cpe:2.3:o:dell:poweredge_r940_firmware:::::::: Remediation No remediation found in references.
dell poweredge r940	All versions
CPE cpe:2.3:h:dell:poweredge_r940:-:::::::* Remediation No remediation found in references.
dell poweredge r640 firmware	< 2.22.2
CPE cpe:2.3:o:dell:poweredge_r640_firmware:::::::: Remediation No remediation found in references.
dell poweredge r640	All versions
CPE cpe:2.3:h:dell:poweredge_r640:-:::::::* Remediation No remediation found in references.
dell poweredge r740xd firmware	< 2.22.2
CPE cpe:2.3:o:dell:poweredge_r740xd_firmware:::::::: Remediation No remediation found in references.
dell poweredge r740xd	All versions
CPE cpe:2.3:h:dell:poweredge_r740xd:-:::::::* Remediation No remediation found in references.
dell poweredge r740 firmware	< 2.22.2
CPE cpe:2.3:o:dell:poweredge_r740_firmware:::::::: Remediation No remediation found in references.
dell poweredge r740	All versions
CPE cpe:2.3:h:dell:poweredge_r740:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Dec 20, 2024	Initial Analysis	[email protected]
Aug 29, 2024	New CVE Received	[email protected]

CVE-2024-38304 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation