vulnerability

Dell PowerEdge: CVE-2024-56161: DSA-2025-040: Security Update for Dell AMD-based PowerEdge Server Vulnerabilities

Severity
6
CVSS
(AV:L/AC:M/Au:M/C:C/I:C/A:N)
Published
Feb 3, 2025
Added
Oct 23, 2025
Modified
Oct 23, 2025

Description

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.

Solution

dell-poweredge-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.