CVE-2024-0172

Description

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

Reserved 2023-12-14 | Published 2024-04-03 | Updated 2024-08-20 | Assigner dell

Problem types

CWE-269: Improper Privilege Management

Product status

Default status
unaffected

Any version before 1.5.6
affected

Any version before 1.1.3
affected

Any version before 1.1.4
affected

Any version before 1.2.5
affected

Any version before 1.3.6
affected

Any version before 1.4.6
affected

Any version before 1.11.2
affected

Any version before 1.7.3
affected

Any version before 1.12.1
affected

Any version before 2.12.4
affected

Any version before 2.19.1
affected

Any version before 2.19.0
affected

Any version before 2.14.1
affected

Any version before 1.20.0
affected

References

www.dell.com/...-privilege-management-security-vulnerability vendor-advisory

cve.org (CVE-2024-0172)

nvd.nist.gov (CVE-2024-0172)

Download JSON