7.9
High
CVE-2024-0172 Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability
Description
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerEdge Platform 2.19 | earliest → < 2.19.1 | 2.19.1 |
| PowerEdge Platform 2.14 | earliest → < 2.14.1 | 2.14.1 |
| PowerEdge Platform 2.12 | earliest → < 2.12.4 | 2.12.4 |
| PowerEdge Platform 1.20 | earliest → < 1.20.0 | 1.20.0 |
| PowerEdge Platform 1.12 | earliest → < 1.12.1 | 1.12.1 |
| PowerEdge Platform 1.11 | earliest → < 1.11.2 | 1.11.2 |
| PowerEdge Platform 1.7 | earliest → < 1.7.3 | 1.7.3 |
| PowerEdge Platform 1.5 | earliest → < 1.5.6 | 1.5.6 |
| PowerEdge Platform 1.4 | earliest → < 1.4.6 | 1.4.6 |
Show the 83 other branches Hide the 83 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerEdge Platform 1.3 | earliest → < 1.3.6 | 1.3.6 |
| PowerEdge Platform 1.2 | earliest → < 1.2.5 | 1.2.5 |
| PowerEdge Platform 1.1 | earliest → < 1.1.4 | 1.1.3 |
| poweredge_r660_firmware 1.5 | earliest → < 1.5.6 | 1.5.6 |
| poweredge_r760_firmware 1.5 | earliest → < 1.5.6 | 1.5.6 |
| poweredge_c6620_firmware 1.5 | earliest → < 1.5.6 | 1.5.6 |
| poweredge_mx760c_firmware 1.5 | earliest → < 1.5.6 | 1.5.6 |
| poweredge_r860_firmware 1.5 | earliest → < 1.5.6 | 1.5.6 |
| poweredge_r960_firmware 1.5 | earliest → < 1.5.6 | 1.5.6 |
| poweredge_hs5610_firmware 1.5 | earliest → < 1.5.6 | 1.5.6 |
| poweredge_hs5620_firmware 1.5 | earliest → < 1.5.6 | 1.5.6 |
| poweredge_r660xs_firmware 1.5 | earliest → < 1.5.6 | 1.5.6 |
| poweredge_r760xs_firmware 1.5 | earliest → < 1.5.6 | 1.5.6 |
| poweredge_r760xd2_firmware 1.5 | earliest → < 1.5.6 | 1.5.6 |
| poweredge_t560_firmware 1.5 | earliest → < 1.5.6 | 1.5.6 |
| poweredge_r760xa_firmware 1.1 | earliest → < 1.1.3 | 1.1.3 |
| poweredge_xe9680_firmware 1.1 | earliest → < 1.1.3 | 1.1.3 |
| poweredge_xr5610_firmware 1.1 | earliest → < 1.1.4 | 1.1.4 |
| poweredge_xr8620t_firmware 1.1 | earliest → < 1.1.3 | 1.1.3 |
| poweredge_xr7620_firmware 1.5 | earliest → < 1.5.6 | 1.5.6 |
| poweredge_xe8640_firmware 1.2 | earliest → < 1.2.5 | 1.2.5 |
| poweredge_xe9640_firmware 1.3 | earliest → < 1.3.6 | 1.3.6 |
| poweredge_r6615_firmware 1.4 | earliest → < 1.4.6 | 1.4.6 |
| poweredge_r7615_firmware 1.4 | earliest → < 1.4.6 | 1.4.6 |
| poweredge_r6625_firmware 1.4 | earliest → < 1.4.6 | 1.4.6 |
| poweredge_r7625_firmware 1.4 | earliest → < 1.4.6 | 1.4.6 |
| poweredge_r650_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
| poweredge_r750_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
| poweredge_r750xa_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
| poweredge_c6520_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
| poweredge_mx750c_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
| poweredge_r550_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
| poweredge_r450_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
| poweredge_r650xs_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
| poweredge_r750xs_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
| poweredge_t550_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
| poweredge_xr11_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
| poweredge_xr12_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
| poweredge_t150_firmware 1.7 | earliest → < 1.7.3 | 1.7.3 |
| poweredge_t350_firmware 1.7 | earliest → < 1.7.3 | 1.7.3 |
| poweredge_r250_firmware 1.7 | earliest → < 1.7.3 | 1.7.3 |
| poweredge_r350_firmware 1.7 | earliest → < 1.7.3 | 1.7.3 |
| poweredge_xr4510c_firmware 1.12 | earliest → < 1.12.1 | 1.12.1 |
| poweredge_xr4520c_firmware 1.12 | earliest → < 1.12.1 | 1.12.1 |
| poweredge_r6515_firmware 2.12 | earliest → < 2.12.4 | 2.12.4 |
| poweredge_r6525_firmware 2.12 | earliest → < 2.12.4 | 2.12.4 |
| poweredge_r7515_firmware 2.12 | earliest → < 2.12.4 | 2.12.4 |
| poweredge_r7525_firmware 2.12 | earliest → < 2.12.4 | 2.12.4 |
| poweredge_c6525_firmware 2.12 | earliest → < 2.12.4 | 2.12.4 |
| poweredge_xe8545_firmware 2.12 | earliest → < 2.12.4 | 2.12.4 |
| poweredge_r740_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_r740xd_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_r640_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_r940_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_r540_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_r440_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_t440_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_xr2_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_r740xd2_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_r840_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_r940xa_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_t640_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_c6420_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_fc640_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_m640_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_mx740c_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_mx840c_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_c4140_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| poweredge_xe2420_firmware 2.19 | earliest → < 2.19.0 | 2.19.0 |
| poweredge_xe7420_firmware 2.19 | earliest → < 2.19.0 | 2.19.0 |
| poweredge_xe7440_firmware 2.19 | earliest → < 2.19.0 | 2.19.0 |
| poweredge_t140_firmware 2.14 | earliest → < 2.14.1 | 2.14.1 |
| poweredge_t340_firmware 2.14 | earliest → < 2.14.1 | 2.14.1 |
| poweredge_r240_firmware 2.14 | earliest → < 2.14.1 | 2.14.1 |
| poweredge_r340_firmware 2.14 | earliest → < 2.14.1 | 2.14.1 |
| poweredge_r6415_firmware 1.20 | earliest → < 1.20.0 | 1.20.0 |
| poweredge_r7415_firmware 1.20 | earliest → < 1.20.0 | 1.20.0 |
| poweredge_r7425_firmware 1.20 | earliest → < 1.20.0 | 1.20.0 |
| emc_storage_nx3240_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| emc_storage_nx3340_firmware 2.19 | earliest → < 2.19.1 | 2.19.1 |
| emc_xc_core_xc450_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
| emc_xc_core_xc650_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
| emc_xc_core_xc750_firmware 1.11 | earliest → < 1.11.2 | 1.11.2 |
Other CVEs of PowerEdge Platform
The 32 CVEs of PowerEdge Platform →
CVE-2024-38304
Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of…
3.8
Low
CVE-2024-38303
Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Improper Input Validation vulnerability
5.3
Medium
CVE-2024-0171
Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability
5.3
Medium
CVE-2024-25942
Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability
4.4
Medium