CVE-2024-0172

· HIGHAnalyzed

← All CVEs

CVSS v3.1

7.9

EPSS

0.15%

Published

Apr 3, 2024

Modified

Feb 4, 2025

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L

Weaknesses (CWE)

CWE-269

Affected Products (186)

dell · poweredge_r660_firmware (up to 1.5.6)vulnerable

dell · poweredge_r660

dell · poweredge_r760_firmware (up to 1.5.6)vulnerable

dell · poweredge_r760

dell · poweredge_c6620_firmware (up to 1.5.6)vulnerable

dell · poweredge_c6620

dell · poweredge_mx760c_firmware (up to 1.5.6)vulnerable

dell · poweredge_mx760c

dell · poweredge_r860_firmware (up to 1.5.6)vulnerable

dell · poweredge_r860

dell · poweredge_r960_firmware (up to 1.5.6)vulnerable

dell · poweredge_r960

dell · poweredge_hs5610_firmware (up to 1.5.6)vulnerable

dell · poweredge_hs5610

dell · poweredge_hs5620_firmware (up to 1.5.6)vulnerable

dell · poweredge_hs5620

dell · poweredge_r660xs_firmware (up to 1.5.6)vulnerable

dell · poweredge_r660xs

dell · poweredge_r760xs_firmware (up to 1.5.6)vulnerable

dell · poweredge_r760xs

dell · poweredge_r760xd2_firmware (up to 1.5.6)vulnerable

dell · poweredge_r760xd2

dell · poweredge_t560_firmware (up to 1.5.6)vulnerable

dell · poweredge_t560

dell · poweredge_r760xa_firmware (up to 1.1.3)vulnerable

dell · poweredge_r760xa

dell · poweredge_xe9680_firmware (up to 1.1.3)vulnerable

dell · poweredge_xe9680

dell · poweredge_xr5610_firmware (up to 1.1.4)vulnerable

dell · poweredge_xr5610

dell · poweredge_xr8610t_firmware (up to 1.1.3)vulnerable

dell · poweredge_xr8610t

dell · poweredge_xr8620t_firmware (up to 1.1.3)vulnerable

dell · poweredge_xr8620t

dell · poweredge_xr7620_firmware (up to 1.5.6)vulnerable

dell · poweredge_xr7620

dell · poweredge_xe8640_firmware (up to 1.2.5)vulnerable

dell · poweredge_xe8640

dell · poweredge_xe9640_firmware (up to 1.3.6)vulnerable

dell · poweredge_xe9640

dell · poweredge_r6615_firmware (up to 1.4.6)vulnerable

dell · poweredge_r6615

dell · poweredge_r7615_firmware (up to 1.4.6)vulnerable

dell · poweredge_r7615

dell · poweredge_r6625_firmware (up to 1.4.6)vulnerable

dell · poweredge_r6625

dell · poweredge_r7625_firmware (up to 1.4.6)vulnerable

dell · poweredge_r7625

dell · poweredge_r650_firmware (up to 1.11.2)vulnerable

dell · poweredge_r650

...and 136 more

References (2)

https://www.dell.com/support/kbdoc/en-us/000223727/dsa-2024-035-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000223727/dsa-2024-035-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs