5.3
Medium
CVE-2024-0171 Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability
Description
Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerEdge Platform 1.8 | earliest → < 1.8.3 | 1.8.3 |
| PowerEdge Platform 1.3 | earliest → < 1.3.3 | 1.3.3 |
Other CVEs of PowerEdge Platform
The 32 CVEs of PowerEdge Platform →
CVE-2024-38304
Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of…
3.8
Low
CVE-2024-38303
Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Improper Input Validation vulnerability
5.3
Medium
CVE-2024-0172
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability
7.9
High
CVE-2024-25942
Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability
4.4
Medium