DELL Security Advisory
Published Date: Not specified
CVE: CVE-2024-36315
Advisory Summary
🔎 🛡️ Security Alert: DSA-2026-076 (High Severity) — AMD-based PowerEdge vulnerability fix
⚠️ Alarms (What’s happening):
Dell has released DSA-2026-076 addressing a High severity security issue affecting AMD-based Dell PowerEdge servers. The advisory covers multiple CVEs and impacts both BIOS/firmware and the affected server families listed below.
- CVE-2024-36315
- CVE-2025-61971
- CVE-2025-61972
- PowerEdge R6715 / R7715 / R6725 / R7725 / R7725xd
- PowerEdge M7725
- PowerEdge XE7745 / XE9785 / XE9785L
- Additional related PowerEdge models and BIOS components are referenced in the advisory scope.
- Prioritize patching on the affected PowerEdge models, especially those running critical workloads or exposed management planes.
- Validate whether the environment uses BIOS/firmware-managed boot paths or remote provisioning that could increase exposure.
- Confirm the installation path per Dell guidance (e.g., lifecycle/firmware update workflow) and document maintenance windows and rollback expectations.
- After updating, verify firmware versions against Dell’s recommended baseline.
- Re-check asset inventories to ensure no “variant” systems are missed (same line, different sub-model).
- Review related controls: secure boot posture, out-of-band access governance, and monitoring for anomalous reboot/firmware-related events.
-2025-61971
Reference: Vendor Advisory