BDU:2025-12853
Уязвимость микропрограммного обеспечения BIOS серверов Dell PowerEdge, позволяющая нарушителю раскрыть защищаемую информацию
📄 Описание
Уязвимость микропрограммного обеспечения BIOS серверов Dell PowerEdge связана с записью данных за границами буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть защищаемую информацию
🖥️ Уязвимое ПО
Dell Technologies
Наименование ПО: PowerEdge R770, PowerEdge R670, PowerEdge R570, PowerEdge R470, PowerEdge R6715, PowerEdge R7715, PowerEdge R6725, PowerEdge R7725, PowerEdge R660, PowerEdge R760, PowerEdge C6620, PowerEdge MX760c, PowerEdge R860, PowerEdge R960, PowerEdge HS5610, PowerEdge HS5620, PowerEdge R660xs, PowerEdge R760xs, PowerEdge R760xd2, PowerEdge T560, PowerEdge R760xa, PowerEdge XE9680, PowerEdge XE9680L, PowerEdge XR5610, PowerEdge XR8610t, PowerEdge XR8620t, PowerEdge XR7620, PowerEdge XE8640, PowerEdge XE9640, PowerEdge T160, PowerEdge T360, PowerEdge R260, PowerEdge R360, PowerEdge R650, PowerEdge R750, PowerEdge R750XA, PowerEdge C6520, PowerEdge MX750C, PowerEdge R550, PowerEdge R450, PowerEdge R650XS, PowerEdge R750XS, PowerEdge T550, PowerEdge XR11, PowerEdge XR12, PowerEdge XR4510c, PowerEdge XR4520c, PowerEdge T150, PowerEdge T350, PowerEdge R250, PowerEdge R350, PowerEdge R740, PowerEdge R740XD, PowerEdge R640, PowerEdge R940, PowerEdge R540, PowerEdge R440, PowerEdge T440, PowerEdge XR2, PowerEdge R740xD2, PowerEdge R840, PowerEdge R940xa, PowerEdge T640, PowerEdge C6420, PowerEdge FC640, PowerEdge M640, PowerEdge M640 (for PE VRTX), PowerEdge MX740c, PowerEdge MX840c, PowerEdge C4140, DSS 8440, PowerEdge XE2420, PowerEdge XE7420, PowerEdge XE7440, PowerEdge T140, PowerEdge T340, PowerEdge R240, PowerEdge R340, EMC Storage NX3240, EMC Storage NX3340, NX440, XC Core XC660, XC Core XC760, XC Core XC660xs, XC Core XC760xa, EMC XC Core XC450, EMC XC Core XC650, EMC XC Core XC750, EMC XC Core XC750xa, EMC XC Core XC6520, EMC XC Core 6420 System, EMC XC Core XC640 System, EMC XC Core XC740xd System, EMC XC Core XC740xd2, EMC XC Core XC940 System, EMC XC Core XCXR2, PowerEdge R6615, PowerEdge R7615, PowerEdge R6625, PowerEdge R7625, PowerEdge C6615, PowerEdge R6515, PowerEdge R6525, PowerEdge R7515, PowerEdge R7525, PowerEdge C6525, PowerEdge XE8545, EMC XC Core XC7525, XC Core XC7625, PowerEdge R6415, PowerEdge R7415, PowerEdge R7425, iDRAC9
Версия ПО: до 1.2.6 (PowerEdge R770), до 1.2.6 (PowerEdge R670), до 1.2.6 (PowerEdge R570), до 1.2.6 (PowerEdge R470), до 1.1.2 (PowerEdge R6715), до 1.1.2 (PowerEdge R7715), до 1.1.3 (PowerEdge R6725), до 1.1.3 (PowerEdge R7725), до 2.5.4 (PowerEdge R660), до 2.5.4 (PowerEdge R760), до 2.5.4 (PowerEdge C6620), до 2.5.4 (PowerEdge MX760c), до 2.5.4 (PowerEdge R860), до 2.5.4 (PowerEdge R960), до 2.5.4 (PowerEdge HS5610), до 2.5.4 (PowerEdge HS5620), до 2.5.4 (PowerEdge R660xs), до 2.5.4 (PowerEdge R760xs), до 2.5.4 (PowerEdge R760xd2), до 2.5.4 (PowerEdge T560), до 2.5.4 (PowerEdge R760xa), до 2.5.4 (PowerEdge XE9680), до 2.5.4 (PowerEdge XE9680L), до 2.5.4 (PowerEdge XR5610), до 2.5.4 (PowerEdge XR8610t), до 2.5.4 (PowerEdge XR8620t), до 2.5.4 (PowerEdge XR7620), до 2.5.4 (PowerEdge XE8640), до 2.5.4 (PowerEdge XE9640), до 2.0.0 (PowerEdge T160), до 2.0.0 (PowerEdge T360), до 2.0.0 (PowerEdge R260), до 2.0.0 (PowerEdge R360), до 1.16.2 (PowerEdge R650), до 1.16.2 (PowerEdge R750), до 1.16.2 (PowerEdge R750XA), до 1.16.2 (PowerEdge C6520), до 1.16.2 (PowerEdge MX750C), до 1.16.2 (PowerEdge R550), до 1.16.2 (PowerEdge R450), до 1.16.2 (PowerEdge R650XS), до 1.16.2 (PowerEdge R750XS), до 1.16.2 (PowerEdge T550), до 1.16.2 (PowerEdge XR11), до 1.16.2 (PowerEdge XR12), до 1.17.3 (PowerEdge XR4510c), до 1.17.3 (PowerEdge XR4520c), до 1.11.1 (PowerEdge T150), до 1.11.1 (PowerEdge T350), до 1.11.1 (PowerEdge R250), до 1.11.1 (PowerEdge R350), до 2.23.0 (PowerEdge R740), до 2.23.0 (PowerEdge R740XD), до 2.23.0 (PowerEdge R640), до 2.23.0 (PowerEdge R940), до 2.23.0 (PowerEdge R540), до 2.23.0 (PowerEdge R440), до 2.23.0 (PowerEdge T440), до 2.23.0 (PowerEdge XR2), до 2.23.0 (PowerEdge R740xD2), до 2.23.0 (PowerEdge R840), до 2.23.0 (PowerEdge R940xa), до 2.23.0 (PowerEdge T640), до 2.23.0 (PowerEdge C6420), до 2.23.0 (PowerEdge FC640), до 2.23.0 (PowerEdge M640), до 2.23.0 (PowerEdge M640 (for PE VRTX)), до 2.23.0 (PowerEdge MX740c), до 2.23.0 (PowerEdge MX840c), до 2.23.0 (PowerEdge C4140), до 2.23.0 (DSS 8440), до 2.23.0 (PowerEdge XE2420), до 2.23.0 (PowerEdge XE7420), до 2.23.0 (PowerEdge XE7440), до 2.18.0 (PowerEdge T140), до 2.18.0 (PowerEdge T340), до 2.18.0 (PowerEdge R240), до 2.18.0 (PowerEdge R340), до 2.23.0 (EMC Storage NX3240), до 2.23.0 (EMC Storage NX3340), до 2.18.0 (NX440), до 2.5.4 (XC Core XC660), до 2.5.4 (XC Core XC760), до 2.5.4 (XC Core XC660xs), до 2.5.4 (XC Core XC760xa), до 1.16.2 (EMC XC Core XC450), до 1.16.2 (EMC XC Core XC650), до 1.16.2 (EMC XC Core XC750), до 1.16.2 (EMC XC Core XC750xa), до 1.16.2 (EMC XC Core XC6520), до 2.23.0 (EMC XC Core 6420 System), до 2.23.0 (EMC XC Core XC640 System), до 2.23.0 (EMC XC Core XC740xd System), до 2.23.0 (EMC XC Core XC740xd2), до 2.23.0 (EMC XC Core XC940 System), до 2.23.0 (EMC XC Core XCXR2), до 1.11.2 (PowerEdge R6615), до 1.11.2 (PowerEdge R7615), до 1.11.2 (PowerEdge R6625), до 1.11.2 (PowerEdge R7625), до 1.6.2 (PowerEdge C6615), до 2.18.1 (PowerEdge R6515), до 2.18.1 (PowerEdge R6525), до 2.18.1 (PowerEdge R7515), до 2.18.1 (PowerEdge R7525), до 2.18.1 (PowerEdge C6525), до 2.17.1 (PowerEdge XE8545), до 2.18.1 (EMC XC Core XC7525), до 1.11.2 (XC Core XC7625), до 1.25.0 (PowerEdge R6415), до 1.25.0 (PowerEdge R7415), до 1.25.0 (PowerEdge R7425), до 7.00.00.181 (iDRAC9), до 7.20.10.50 (iDRAC9)
Тип ПО: Микропрограммный код, Сетевое средство, ПО сетевого программно-аппаратного средства, ПО программно-аппаратного средства
ОС / платформа:
⚙️ Технические сведения
Тип ошибки
Раскрытие конфиденциальной системной информации из-за неочищенной отладочной информации (CWE-1258)
Класс уязвимости
Уязвимость кода
Дата выявления
23.09.2025
Способ эксплуатации
Несанкционированный сбор информации
Способ устранения
Обновление программного обеспечения
Статус уязвимости
Подтверждена производителем
Наличие эксплойта
Данные уточняются
Устранение
Уязвимость устранена
📊 CVSS
CVSS 2.0
AV:N/AC:L/Au:S/C:C/I:N/A:N
CVSS 3.0
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
⚠️ Уровень опасности
Средний уровень опасности (базовая оценка CVSS 2.0 составляет 6,8)
Средний уровень опасности (базовая оценка CVSS 3.1 составляет 4,9)
🏷️ Идентификаторы
CVE-2025-26482
📅 Даты
Дата публикации
14.10.2025
Последнее обновление
14.10.2025
← Назад к списку