CVE-2024-0172 | THREATINT

Assigner	dell
Reserved	2023-12-14
Published	2024-04-03
Updated	2024-04-03

Description

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

HIGH: 7.9

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L

Problem types

CWE-269: Improper Privilege Management

Product status

Default status

unaffected

Any version before 1.5.6

affected

Any version before 1.1.3

affected

Any version before 1.1.4

affected

Any version before 1.2.5

affected

Any version before 1.3.6

affected

Any version before 1.4.6

affected

Any version before 1.11.2

affected

Any version before 1.7.3

affected

Any version before 1.12.1

affected

Any version before 2.12.4

affected

Any version before 2.19.1

affected

Any version before 2.19.0

affected

Any version before 2.14.1

affected

Any version before 1.20.0

affected

References

https://www.dell.com/support/kbdoc/en-us/000223727/dsa-2024-035-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability vendor-advisory

cve.org CVE-2024-0172

nvd.nist.gov CVE-2024-0172

Download JSON