DELL Security Advisory
Published Date: Not specified
CVE: CVE-2024-36274
Advisory Summary
🚨 ⚠️ DSA-2025-042 — High-Severity Updates for PowerEdge (Intel Ethernet + Intel Processor CVEs)
- Intel Ethernet Controllers & Adapters (including common Dell Intel NICs/LOM integrations)
- Intel processor-related vulnerabilities
- Remote attack surface exposure through network-facing components (NIC/LOM)
- Potential privilege escalation / impact to confidentiality or integrity depending on the specific CVE paths
- Increased likelihood of exploitation as public tooling and researcher coverage typically follow advisory releases
- Platforms: PowerEdge including R660, R760, C6620, MX760c, R860, R960, HS5610/HS5620, R660xs (and more variants)
- Components: BIOS/firmware, Intel NICs/adapters and integrated networking, plus related software components listed in the advisory
📌 Key CVEs called out
CVE-2024-36274, CVE-2024-39286, CVE-2024-25571, CVE-2024-37020, CVE-2024-21859, CVE-2024-31155, CVE-2024-24852
- Tighten inbound exposure on affected management and network interfaces
- Ensure segmentation and restrict east-west traffic for server subnets
🔎 Operational note for data centers
Because this targets both network controllers and processor vulnerability class, treat it as a cross-layer update—network monitoring and host security posture checks should be run after rollout to confirm no regressions and to align with your vulnerability management SLAs.
Reference: Vendor Advisory