CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2024-0172
High (7.8) in dell. EPSS 0.1% chance of exploitation in the next 30 days.
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
- CWE
- CWE-269
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:dss_8440_firmware
- dell:emc_storage_nx3240_firmware
- dell:emc_storage_nx3340_firmware
- dell:emc_xc_core_6420_system_firmware
- dell:emc_xc_core_xc450_firmware
- dell:emc_xc_core_xc640_system_firmware
- dell:emc_xc_core_xc650_firmware
- dell:emc_xc_core_xc6520_firmware
- dell:emc_xc_core_xc740xd2_firmware
- dell:emc_xc_core_xc740xd_system_firmware
- dell:emc_xc_core_xc750_firmware
- dell:emc_xc_core_xc750xa_firmware
- dell:emc_xc_core_xc7525_firmware
- dell:emc_xc_core_xc940_system_firmware
- dell:emc_xc_core_xcxr2_firmware
- dell:nx440_firmware
- dell:poweredge_c4140_firmware
- dell:poweredge_c6420_firmware
- dell:poweredge_c6520_firmware
- dell:poweredge_c6525_firmware
- dell:poweredge_c6620_firmware
- dell:poweredge_fc640_firmware
- dell:poweredge_hs5610_firmware
- dell:poweredge_hs5620_firmware
- dell:poweredge_m640_\(pe_vrtx\)_firmware
- dell:poweredge_m640_firmware
- dell:poweredge_mx740c_firmware
- dell:poweredge_mx750c_firmware
- dell:poweredge_mx760c_firmware
- dell:poweredge_mx840c_firmware
- dell:poweredge_r240_firmware
- dell:poweredge_r250_firmware
- dell:poweredge_r340_firmware
- dell:poweredge_r350_firmware
- dell:poweredge_r440_firmware
- dell:poweredge_r450_firmware
- dell:poweredge_r540_firmware
- dell:poweredge_r550_firmware
- dell:poweredge_r640_firmware
- dell:poweredge_r6415_firmware
- dell:poweredge_r650_firmware
- dell:poweredge_r650xs_firmware
- dell:poweredge_r6515_firmware
- dell:poweredge_r6525_firmware
- dell:poweredge_r660_firmware
- dell:poweredge_r660xs_firmware
- dell:poweredge_r6615_firmware
- dell:poweredge_r6625_firmware
- dell:poweredge_r740_firmware
- dell:poweredge_r740xd2_firmware
References
- https://www.dell.com/support/kbdoc/en-us/000223727/dsa-2024-035-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000223727/dsa-2024-035-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability