DELL Security Advisory
Published Date: Not specified
CVE: CVE-2025-31938
Advisory Summary
🔔 🚨 Title: Security Update Required — OOB-MSM Module (Intel® Xeon® 6 + Intel® TDX)
Dell has published DSA-2026-357 to address a Medium-severity vulnerability in the OOB-MSM module affecting certain Dell PowerEdge systems running Intel® Xeon® 6 processors with Intel® TDX. The advisory references CVE-2025-31938 and includes BIOS-related update guidance.
—
- Affected component: OOB-MSM module
- Security impact: Could enable unauthorized access or manipulation paths tied to out-of-band/firmware-layer execution flows (typical for modules in this trust boundary).
- Why it matters for data centers: Even “Medium” issues can become high-risk when exposed via remote administration, management networks, or supply-chain/firmware persistence.
—
- Dell PowerEdge R770
- Dell PowerEdge R670
- Dell PowerEdge R570
- Dell PowerEdge R470
- Dell PowerEdge XE7740
- Dell PowerEdge R770AP
- Dell PowerEdge XE9780
(Advisory scope includes BIOS as the remediation surface.)
—
🛡️ ✅ Recommended Actions (Actionable)
1. Verify exposure: Confirm whether your deployed configuration matches the advisory prerequisites (Intel® Xeon® 6 + Intel® TDX).
2. Plan BIOS/firmware update: Schedule downtime (if required) and apply the vendor-recommended BIOS update from DSA-2026-357.
3. Harden management plane: Ensure the out-of-band/remote management interfaces are restricted (VPN/bastion, segmentation, least privilege, MFA where applicable).
4. Validate after update: Re-check BIOS/firmware versions and confirm TDX-enabled workflows still operate as expected.
—
- This is a firmware-adjacent risk: patching should be prioritized for fleets with remote lifecycle management.
- If you operate confidential computing (TDX) environments, ensure your management network design doesn’t inadvertently increase reachability during patch windows.
—
- CVE-2025-31938 (OOB-MSM module)
—
-2025-31938
Reference: Vendor Advisory