CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2023-32460
High (7.8) in dell. EPSS 0.2% chance of exploitation in the next 30 days.
Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
- CWE
- CWE-306
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:dss_8440_firmware
- dell:emc_nx440_firmware
- dell:emc_storage_nx3240_firmware
- dell:emc_storage_nx3340_firmware
- dell:emc_xc_core_6420_firmware
- dell:emc_xc_core_xc450_firmware
- dell:emc_xc_core_xc640_firmware
- dell:emc_xc_core_xc650_firmware
- dell:emc_xc_core_xc6520_firmware
- dell:emc_xc_core_xc740xd2_firmware
- dell:emc_xc_core_xc740xd_firmware
- dell:emc_xc_core_xc750_firmware
- dell:emc_xc_core_xc750xa_firmware
- dell:emc_xc_core_xc7525_firmware
- dell:emc_xc_core_xc940_firmware
- dell:emc_xc_core_xcxr2_firmware
- dell:nx3230_firmware
- dell:nx3330_firmware
- dell:nx430_firmware
- dell:poweredge_c4130_firmware
- dell:poweredge_c4140_firmware
- dell:poweredge_c6320_firmware
- dell:poweredge_c6420_firmware
- dell:poweredge_c6520_firmware
- dell:poweredge_c6525_firmware
- dell:poweredge_c6615_firmware
- dell:poweredge_c6620_firmware
- dell:poweredge_fc430_firmware
- dell:poweredge_fc630_firmware
- dell:poweredge_fc640_firmware
- dell:poweredge_fc830_firmware
- dell:poweredge_hs5610_firmware
- dell:poweredge_hs5620_firmware
- dell:poweredge_m630_\(pe_vrtx\)_firmware
- dell:poweredge_m630_firmware
- dell:poweredge_m640_\(pe_vrtx\)_firmware
- dell:poweredge_m640_firmware
- dell:poweredge_m830_\(pe_vrtx\)_firmware
- dell:poweredge_m830_firmware
- dell:poweredge_mx740c_firmware
- dell:poweredge_mx750c_firmware
- dell:poweredge_mx760c_firmware
- dell:poweredge_mx840c_firmware
- dell:poweredge_r230_firmware
- dell:poweredge_r240_firmware
- dell:poweredge_r250_firmware
- dell:poweredge_r330_firmware
- dell:poweredge_r340_firmware
- dell:poweredge_r350_firmware
- dell:poweredge_r430_firmware
References
- https://www.dell.com/support/kbdoc/en-us/000219550/dsa-2023-361-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000219550/dsa-2023-361-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability