CVEvulnerability

CVE-2024-0172

7.8 HIGH Published 2024-04-03 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-04-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.9 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269

Description

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

Affected configurations

• dell poweredge r660 firmware (< 1.5.6) • dell poweredge r760 firmware (< 1.5.6) • dell poweredge c6620 firmware (< 1.5.6) • dell poweredge mx760c firmware (< 1.5.6) • dell poweredge r860 firmware (< 1.5.6) • dell poweredge r960 firmware (< 1.5.6) • dell poweredge hs5610 firmware (< 1.5.6) • dell poweredge hs5620 firmware (< 1.5.6) • dell poweredge r660xs firmware (< 1.5.6) • dell poweredge r760xs firmware (< 1.5.6) • dell poweredge r760xd2 firmware (< 1.5.6) • dell poweredge t560 firmware (< 1.5.6) • dell poweredge r760xa firmware (< 1.1.3) • dell poweredge xe9680 firmware (< 1.1.3) • dell poweredge xr5610 firmware (< 1.1.4) • dell poweredge xr8610t firmware (< 1.1.3) • dell poweredge xr8620t firmware (< 1.1.3) • dell poweredge xr7620 firmware (< 1.5.6) • dell poweredge xe8640 firmware (< 1.2.5) • dell poweredge xe9640 firmware (< 1.3.6) • dell poweredge r6615 firmware (< 1.4.6) • dell poweredge r7615 firmware (< 1.4.6) • dell poweredge r6625 firmware (< 1.4.6) • dell poweredge r7625 firmware (< 1.4.6) • dell poweredge r650 firmware (< 1.11.2) • dell poweredge r750 firmware (< 1.11.2) • dell poweredge r750xa firmware (< 1.11.2) • dell poweredge c6520 firmware (< 1.11.2) • dell poweredge mx750c firmware (< 1.11.2) • dell poweredge r550 firmware (< 1.11.2) • dell poweredge r450 firmware (< 1.11.2) • dell poweredge r650xs firmware (< 1.11.2) • dell poweredge r750xs firmware (< 1.11.2) • dell poweredge t550 firmware (< 1.11.2) • dell poweredge xr11 firmware (< 1.11.2) • dell poweredge xr12 firmware (< 1.11.2) • dell poweredge t150 firmware (< 1.7.3) • dell poweredge t350 firmware (< 1.7.3) • dell poweredge r250 firmware (< 1.7.3) • dell poweredge r350 firmware (< 1.7.3) • dell poweredge xr4510c firmware (< 1.12.1) • dell poweredge xr4520c firmware (< 1.12.1) • dell poweredge r6515 firmware (< 2.12.4) • dell poweredge r6525 firmware (< 2.12.4) • dell poweredge r7515 firmware (< 2.12.4) • dell poweredge r7525 firmware (< 2.12.4) • dell poweredge c6525 firmware (< 2.12.4) • dell poweredge xe8545 firmware (< 2.12.4) • dell poweredge r740 firmware (< 2.19.1) • dell poweredge r740xd firmware (< 2.19.1) • dell poweredge r640 firmware (< 2.19.1) • dell poweredge r940 firmware (< 2.19.1) • dell poweredge r540 firmware (< 2.19.1) • dell poweredge r440 firmware (< 2.19.1) • dell poweredge t440 firmware (< 2.19.1) • dell poweredge xr2 firmware (< 2.19.1) • dell poweredge r740xd2 firmware (< 2.19.1) • dell poweredge r840 firmware (< 2.19.1) • dell poweredge r940xa firmware (< 2.19.1) • dell poweredge t640 firmware (< 2.19.1) … and 33 more

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References