Description

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

INFO

Published Date :

2024-04-03T09:09:18.449Z

Last Modified :

2024-08-20T20:30:48.954Z

Source :

dell
AFFECTED PRODUCTS

The following products are affected by CVE-2024-0172 vulnerability.

Vendors Products
Dell
  • Dss 8440
  • Dss 8440 Firmware
  • Emc Storage Nx3240
  • Emc Storage Nx3240 Firmware
  • Emc Storage Nx3340
  • Emc Storage Nx3340 Firmware
  • Emc Xc Core 6420 System
  • Emc Xc Core 6420 System Firmware
  • Emc Xc Core Xc450
  • Emc Xc Core Xc450 Firmware
  • Emc Xc Core Xc640 System
  • Emc Xc Core Xc640 System Firmware
  • Emc Xc Core Xc650
  • Emc Xc Core Xc650 Firmware
  • Emc Xc Core Xc6520
  • Emc Xc Core Xc6520 Firmware
  • Emc Xc Core Xc740xd2
  • Emc Xc Core Xc740xd2 Firmware
  • Emc Xc Core Xc740xd System
  • Emc Xc Core Xc740xd System Firmware
  • Emc Xc Core Xc750
  • Emc Xc Core Xc750 Firmware
  • Emc Xc Core Xc750xa
  • Emc Xc Core Xc750xa Firmware
  • Emc Xc Core Xc7525
  • Emc Xc Core Xc7525 Firmware
  • Emc Xc Core Xc940 System
  • Emc Xc Core Xc940 System Firmware
  • Emc Xc Core Xcxr2
  • Emc Xc Core Xcxr2 Firmware
  • Nx440
  • Nx440 Firmware
  • Poweredge C4140
  • Poweredge C4140 Firmware
  • Poweredge C6420
  • Poweredge C6420 Firmware
  • Poweredge C6520
  • Poweredge C6520 Firmware
  • Poweredge C6525
  • Poweredge C6525 Firmware
  • Poweredge C6620
  • Poweredge C6620 Firmware
  • Poweredge Fc640
  • Poweredge Fc640 Firmware
  • Poweredge Hs5610
  • Poweredge Hs5610 Firmware
  • Poweredge Hs5620
  • Poweredge Hs5620 Firmware
  • Poweredge M640
  • Poweredge M640 \(pe Vrtx\)
  • Poweredge M640 \(pe Vrtx\) Firmware
  • Poweredge M640 Firmware
  • Poweredge Mx740c
  • Poweredge Mx740c Firmware
  • Poweredge Mx750c
  • Poweredge Mx750c Firmware
  • Poweredge Mx760c
  • Poweredge Mx760c Firmware
  • Poweredge Mx840c
  • Poweredge Mx840c Firmware
  • Poweredge R240
  • Poweredge R240 Firmware
  • Poweredge R250
  • Poweredge R250 Firmware
  • Poweredge R340
  • Poweredge R340 Firmware
  • Poweredge R350
  • Poweredge R350 Firmware
  • Poweredge R440
  • Poweredge R440 Firmware
  • Poweredge R450
  • Poweredge R450 Firmware
  • Poweredge R540
  • Poweredge R540 Firmware
  • Poweredge R550
  • Poweredge R550 Firmware
  • Poweredge R640
  • Poweredge R640 Firmware
  • Poweredge R6415
  • Poweredge R6415 Firmware
  • Poweredge R650
  • Poweredge R650 Firmware
  • Poweredge R650xs
  • Poweredge R650xs Firmware
  • Poweredge R6515
  • Poweredge R6515 Firmware
  • Poweredge R6525
  • Poweredge R6525 Firmware
  • Poweredge R660
  • Poweredge R660 Firmware
  • Poweredge R660xs
  • Poweredge R660xs Firmware
  • Poweredge R6615
  • Poweredge R6615 Firmware
  • Poweredge R6625
  • Poweredge R6625 Firmware
  • Poweredge R740
  • Poweredge R740 Firmware
  • Poweredge R740xd
  • Poweredge R740xd2
  • Poweredge R740xd2 Firmware
  • Poweredge R740xd Firmware
  • Poweredge R7415
  • Poweredge R7415 Firmware
  • Poweredge R7425
  • Poweredge R7425 Firmware
  • Poweredge R750
  • Poweredge R750 Firmware
  • Poweredge R750xa
  • Poweredge R750xa Firmware
  • Poweredge R750xs
  • Poweredge R750xs Firmware
  • Poweredge R7515
  • Poweredge R7515 Firmware
  • Poweredge R7525
  • Poweredge R7525 Firmware
  • Poweredge R760
  • Poweredge R760 Firmware
  • Poweredge R760xa
  • Poweredge R760xa Firmware
  • Poweredge R760xd2
  • Poweredge R760xd2 Firmware
  • Poweredge R760xs
  • Poweredge R760xs Firmware
  • Poweredge R7615
  • Poweredge R7615 Firmware
  • Poweredge R7625
  • Poweredge R7625 Firmware
  • Poweredge R840
  • Poweredge R840 Firmware
  • Poweredge R860
  • Poweredge R860 Firmware
  • Poweredge R940
  • Poweredge R940 Firmware
  • Poweredge R940xa
  • Poweredge R940xa Firmware
  • Poweredge R960
  • Poweredge R960 Firmware
  • Poweredge T140
  • Poweredge T140 Firmware
  • Poweredge T150
  • Poweredge T150 Firmware
  • Poweredge T340
  • Poweredge T340 Firmware
  • Poweredge T350
  • Poweredge T350 Firmware
  • Poweredge T440
  • Poweredge T440 Firmware
  • Poweredge T550
  • Poweredge T550 Firmware
  • Poweredge T560
  • Poweredge T560 Firmware
  • Poweredge T640
  • Poweredge T640 Firmware
  • Poweredge Xe2420
  • Poweredge Xe2420 Firmware
  • Poweredge Xe7420
  • Poweredge Xe7420 Firmware
  • Poweredge Xe7440
  • Poweredge Xe7440 Firmware
  • Poweredge Xe8545
  • Poweredge Xe8545 Firmware
  • Poweredge Xe8640
  • Poweredge Xe8640 Firmware
  • Poweredge Xe9640
  • Poweredge Xe9640 Firmware
  • Poweredge Xe9680
  • Poweredge Xe9680 Firmware
  • Poweredge Xr11
  • Poweredge Xr11 Firmware
  • Poweredge Xr12
  • Poweredge Xr12 Firmware
  • Poweredge Xr2
  • Poweredge Xr2 Firmware
  • Poweredge Xr4510c
  • Poweredge Xr4510c Firmware
  • Poweredge Xr4520c
  • Poweredge Xr4520c Firmware
  • Poweredge Xr5610
  • Poweredge Xr5610 Firmware
  • Poweredge Xr7620
  • Poweredge Xr7620 Firmware
  • Poweredge Xr8610t
  • Poweredge Xr8610t Firmware
  • Poweredge Xr8620t
  • Poweredge Xr8620t Firmware
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-0172.

URL Resource
https://www.dell.com/support/kbdoc/en-us/000223727/dsa-2024-035-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact