Database/Firmware, BMC & network fabric
Dell PowerEdge 14G Intel BIOS (improper input validation): A high-privileged local attacker extracts information
CVE-2024-38303Firmware, BMC & network fabriccurated
Impact
A high-privileged local attacker extracts information from the firmware layer with scope change - firmware-resident secrets and platform configuration leaking to the OS.
Who can reach it
Local high-privilege user on a 14G Intel PowerEdge.
What to do
Update 14G Intel BIOS to 2.22.x or later. Flash the fixed PowerEdge BIOS. A BIOS update is a cold reboot per node and cannot be done live - on a GPU fleet that means draining jobs and taking the box out of the scheduler, so batch it with other firmware work rather than doing a standalone pass.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.