Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. A local low privileged attacker could potentially exploit this vulnerability to read the contents of non-SMM stack memory.
The product reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Poweredge_r660_firmware | Dell | * | 2.0.0 (excluding) |