5.3
Medium
CVE-2024-0163 Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability
Description
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerEdge BIOS Intel 16G 2.14 | earliest → < 2.14.1 | 2.14.1 |
| PowerEdge BIOS Intel 16G 2.0 | earliest → < 2.0.0 | 2.0.0 |
| PowerEdge BIOS Intel 16G 1.14 | earliest → < 1.14.1 | 1.14.1 |
| PowerEdge BIOS Intel 16G 1.13 | earliest → < 1.13.2 | 1.13.2 |
| PowerEdge BIOS Intel 16G 1.9 | earliest → < 1.9.1 | 1.9.1 |
| PowerEdge BIOS Intel 16G 1.7 | earliest → < 1.7.6 | 1.7.6 |
| PowerEdge BIOS Intel 16G 1.2 | earliest → < 1.2.3 | 1.2.3 |