Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-26336

Опубликовано: 21 мар. 2025
Источник: nvd
CVSS3: 8.3
CVSS3: 9.8
EPSS Низкий

Описание

Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX version(s) prior to 3.41.200.202209300499, contain(s) a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dell:chassis_management_controller_for_poweredge_fx2_firmware:*:*:*:*:*:*:*:*
Версия до 2.40.200.202101130302 (исключая)
cpe:2.3:h:dell:chassis_management_controller_for_poweredge_fx2:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:dell:chassis_management_controller_for_poweredge_vrtx_firmware:*:*:*:*:*:*:*:*
Версия до 3.41.200.202209300499 (исключая)
cpe:2.3:h:dell:chassis_management_controller_for_poweredge_vrtx:-:*:*:*:*:*:*:*

EPSS

Процентиль: 35%
0.00142
Низкий

8.3 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-121
CWE-787

Связанные уязвимости

CVSS3: 8.3
github
11 месяцев назад

Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX version(s) prior to 3.41.200.202209300499, contain(s) a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVSS3: 8.3
fstec
11 месяцев назад

Уязвимость средств мониторинга и управления серверами Dell Chassis Management Controller (CMC) for Dell PowerEdge FX2 и Dell Chassis Management Controller (CMC) for PowerEdge VRTX, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 35%
0.00142
Низкий

8.3 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-121
CWE-787