CVSS 3.1
6.3 mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:NCVE-2024-0163
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
- CWE
- CWE-367
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:emc_xc_core_xc450_firmware
- dell:emc_xc_core_xc650_firmware
- dell:emc_xc_core_xc6520_firmware
- dell:emc_xc_core_xc750_firmware
- dell:emc_xc_core_xc750xa_firmware
- dell:emc_xc_core_xc7525_firmware
- dell:poweredge_c6520_firmware
- dell:poweredge_c6525_firmware
- dell:poweredge_c6615_firmware
- dell:poweredge_c6620_firmware
- dell:poweredge_hs5610_firmware
- dell:poweredge_hs5620_firmware
- dell:poweredge_mx750c_firmware
- dell:poweredge_mx760c_firmware
- dell:poweredge_r250_firmware
- dell:poweredge_r350_firmware
- dell:poweredge_r450_firmware
- dell:poweredge_r550_firmware
- dell:poweredge_r650_firmware
- dell:poweredge_r650xs_firmware
- dell:poweredge_r6515_firmware
- dell:poweredge_r6525_firmware
- dell:poweredge_r660_firmware
- dell:poweredge_r660xs_firmware
- dell:poweredge_r6615_firmware
- dell:poweredge_r6625_firmware
- dell:poweredge_r750_firmware
- dell:poweredge_r750xa_firmware
- dell:poweredge_r750xs_firmware
- dell:poweredge_r7515_firmware
- dell:poweredge_r7525_firmware
- dell:poweredge_r760_firmware
- dell:poweredge_r760xa_firmware
- dell:poweredge_r760xd2_firmware
- dell:poweredge_r760xs_firmware
- dell:poweredge_r7615_firmware
- dell:poweredge_r7625_firmware
- dell:poweredge_r860_firmware
- dell:poweredge_r960_firmware
- dell:poweredge_t150_firmware
- dell:poweredge_t350_firmware
- dell:poweredge_t550_firmware
- dell:poweredge_t560_firmware
- dell:poweredge_xe8545_firmware
- dell:poweredge_xe8640_firmware
- dell:poweredge_xe9640_firmware
- dell:poweredge_xe9680_firmware
- dell:poweredge_xr11_firmware
- dell:poweredge_xr12_firmware
- dell:poweredge_xr4510c_firmware
References
- https://www.dell.com/support/kbdoc/en-us/000222756/dsa-2024-003-security-update-for-dell-poweredge-server-bios-for-a-time-of-check-time-of-use-toctou-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000222756/dsa-2024-003-security-update-for-dell-poweredge-server-bios-for-a-time-of-check-time-of-use-toctou-vulnerability