CVE:CVE-2023-25537
CNNVD:CNNVD-202305-1950
Dell PowerEdge Server BIOS是美国戴尔（Dell）公司的戴尔（Dell）的一款系统更新驱动程序。
Dell PowerEdge Server BIOS 2.18.1之前版本存在缓冲区错误漏洞，该漏洞源于包含越界写入漏洞，具有低权限的本地攻击者可能会利用此漏洞导致在系统管理模式下暴露某些SMRAM堆栈/数据/代码，从而导致任意代码执行或权限升级。
solution:Upgrade dell poweredge_r740_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_r740xd_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_r640_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_r940_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_r540_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_r440_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_t440_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_xr2_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_r740xd2_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_r840_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_r940xa_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_t640_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_c6420_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_fc640_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_m640_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_mx740c_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_mx840c_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_c4140_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell dss_8440_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_xe2420_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_xe7420_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell poweredge_xe7440_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell emc_storage_nx3240_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell emc_storage_nx3340_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell emc_xc_core_6420_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell emc_xc_core_xc640_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell emc_xc_core_xc740xd_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell emc_xc_core_xc740xd2_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell emc_xc_core_xc940_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1); Upgrade dell emc_xc_core_xcxr2_firmware to a higher version than 2.18.1,and avoid the version (,2.18.1)