CVE-2024-0172

Yüksək

Təsvir

Dell PowerEdge Server BIOS və Dell Precision Rack BIOS düzgün olmayan imtiyaz idarəetməsi təhlükəsizlik zəifliyi ehtiva edir. Autentifikasiyadan keçməmiş yerli hücumçu bu zəiflikdən potensial olaraq istifadə edərək imtiyazların yüksəldilməsinə səbəb ola bilər.

CiddilikYüksək

CVSS7.9

İstismar ehtimalı—

MəhsulDell Poweredge R660 Firmware

Dərc3 apr 2024

İlk görülmə3 apr 2024

Zəiflik növüCWE-269Səlahiyyətlərin yanlış idarəsi

Necə düzəltmək olar

Yeniləyin

dell poweredge_r660_firmware1.5.6 və ya daha yeni versiya
dell poweredge_r760_firmware1.5.6 və ya daha yeni versiya
dell poweredge_c6620_firmware1.5.6 və ya daha yeni versiya
dell poweredge_mx760c_firmware1.5.6 və ya daha yeni versiya
dell poweredge_r860_firmware1.5.6 və ya daha yeni versiya
dell poweredge_r960_firmware1.5.6 və ya daha yeni versiya
dell poweredge_hs5610_firmware1.5.6 və ya daha yeni versiya
dell poweredge_hs5620_firmware1.5.6 və ya daha yeni versiya
dell poweredge_r660xs_firmware1.5.6 və ya daha yeni versiya
dell poweredge_r760xs_firmware1.5.6 və ya daha yeni versiya
dell poweredge_r760xd2_firmware1.5.6 və ya daha yeni versiya
dell poweredge_t560_firmware1.5.6 və ya daha yeni versiya

İstehsalçı bildirişləri

dell.com/support/kbdoc/en-us/000223727/dsa-2024-035-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability

Təsirlənən məhsullar

Məhsul	Təsirlənən versiyalar	Düzəldildiyi versiya
dell poweredge_r660_firmware	v < 1.5.6	1.5.6
dell poweredge_r760_firmware	v < 1.5.6	1.5.6
dell poweredge_c6620_firmware	v < 1.5.6	1.5.6
dell poweredge_mx760c_firmware	v < 1.5.6	1.5.6
dell poweredge_r860_firmware	v < 1.5.6	1.5.6
dell poweredge_r960_firmware	v < 1.5.6	1.5.6
dell poweredge_hs5610_firmware	v < 1.5.6	1.5.6
dell poweredge_hs5620_firmware	v < 1.5.6	1.5.6
dell poweredge_r660xs_firmware	v < 1.5.6	1.5.6
dell poweredge_r760xs_firmware	v < 1.5.6	1.5.6
dell poweredge_r760xd2_firmware	v < 1.5.6	1.5.6
dell poweredge_t560_firmware	v < 1.5.6	1.5.6
dell poweredge_r760xa_firmware	v < 1.1.3	1.1.3
dell poweredge_xe9680_firmware	v < 1.1.3	1.1.3
dell poweredge_xr5610_firmware	v < 1.1.4	1.1.4
dell poweredge_xr8610t_firmware	v < 1.1.3	1.1.3
dell poweredge_xr8620t_firmware	v < 1.1.3	1.1.3
dell poweredge_xr7620_firmware	v < 1.5.6	1.5.6
dell poweredge_xe8640_firmware	v < 1.2.5	1.2.5
dell poweredge_xe9640_firmware	v < 1.3.6	1.3.6
dell poweredge_r6615_firmware	v < 1.4.6	1.4.6
dell poweredge_r7615_firmware	v < 1.4.6	1.4.6
dell poweredge_r6625_firmware	v < 1.4.6	1.4.6
dell poweredge_r7625_firmware	v < 1.4.6	1.4.6
dell poweredge_r650_firmware	v < 1.11.2	1.11.2
dell poweredge_r750_firmware	v < 1.11.2	1.11.2
dell poweredge_r750xa_firmware	v < 1.11.2	1.11.2
dell poweredge_c6520_firmware	v < 1.11.2	1.11.2
dell poweredge_mx750c_firmware	v < 1.11.2	1.11.2
dell poweredge_r550_firmware	v < 1.11.2	1.11.2
dell poweredge_r450_firmware	v < 1.11.2	1.11.2
dell poweredge_r650xs_firmware	v < 1.11.2	1.11.2
dell poweredge_r750xs_firmware	v < 1.11.2	1.11.2
dell poweredge_t550_firmware	v < 1.11.2	1.11.2
dell poweredge_xr11_firmware	v < 1.11.2	1.11.2
dell poweredge_xr12_firmware	v < 1.11.2	1.11.2
dell poweredge_t150_firmware	v < 1.7.3	1.7.3
dell poweredge_t350_firmware	v < 1.7.3	1.7.3
dell poweredge_r250_firmware	v < 1.7.3	1.7.3
dell poweredge_r350_firmware	v < 1.7.3	1.7.3
dell poweredge_xr4510c_firmware	v < 1.12.1	1.12.1
dell poweredge_xr4520c_firmware	v < 1.12.1	1.12.1
dell poweredge_r6515_firmware	v < 2.12.4	2.12.4
dell poweredge_r6525_firmware	v < 2.12.4	2.12.4
dell poweredge_r7515_firmware	v < 2.12.4	2.12.4
dell poweredge_r7525_firmware	v < 2.12.4	2.12.4
dell poweredge_c6525_firmware	v < 2.12.4	2.12.4
dell poweredge_xe8545_firmware	v < 2.12.4	2.12.4
dell poweredge_r740_firmware	v < 2.19.1	2.19.1
dell poweredge_r740xd_firmware	v < 2.19.1	2.19.1
dell poweredge_r640_firmware	v < 2.19.1	2.19.1
dell poweredge_r940_firmware	v < 2.19.1	2.19.1
dell poweredge_r540_firmware	v < 2.19.1	2.19.1
dell poweredge_r440_firmware	v < 2.19.1	2.19.1
dell poweredge_t440_firmware	v < 2.19.1	2.19.1
dell poweredge_xr2_firmware	v < 2.19.1	2.19.1
dell poweredge_r740xd2_firmware	v < 2.19.1	2.19.1
dell poweredge_r840_firmware	v < 2.19.1	2.19.1
dell poweredge_r940xa_firmware	v < 2.19.1	2.19.1
dell poweredge_t640_firmware	v < 2.19.1	2.19.1
dell poweredge_c6420_firmware	v < 2.19.1	2.19.1
dell poweredge_fc640_firmware	v < 2.19.1	2.19.1
dell poweredge_m640_firmware	v < 2.19.1	2.19.1
dell poweredge_m640_\(pe_vrtx\)_firmware	v < 2.19.1	2.19.1
dell poweredge_mx740c_firmware	v < 2.19.1	2.19.1
dell poweredge_mx840c_firmware	v < 2.19.1	2.19.1
dell poweredge_c4140_firmware	v < 2.19.1	2.19.1
dell dss_8440_firmware	v < 2.19.0	2.19.0
dell poweredge_xe2420_firmware	v < 2.19.0	2.19.0
dell poweredge_xe7420_firmware	v < 2.19.0	2.19.0
dell poweredge_xe7440_firmware	v < 2.19.0	2.19.0
dell poweredge_t140_firmware	v < 2.14.1	2.14.1
dell poweredge_t340_firmware	v < 2.14.1	2.14.1
dell poweredge_r240_firmware	v < 2.14.1	2.14.1
dell poweredge_r340_firmware	v < 2.14.1	2.14.1
dell poweredge_r6415_firmware	v < 1.20.0	1.20.0
dell poweredge_r7415_firmware	v < 1.20.0	1.20.0
dell poweredge_r7425_firmware	v < 1.20.0	1.20.0
dell emc_storage_nx3240_firmware	v < 2.19.1	2.19.1
dell emc_storage_nx3340_firmware	v < 2.19.1	2.19.1
dell nx440_firmware	v < 2.14.1	2.14.1
dell emc_xc_core_xc450_firmware	v < 1.11.2	1.11.2
dell emc_xc_core_xc650_firmware	v < 1.11.2	1.11.2
dell emc_xc_core_xc750_firmware	v < 1.11.2	1.11.2
dell emc_xc_core_xc750xa_firmware	v < 1.11.2	1.11.2
dell emc_xc_core_xc6520_firmware	v < 1.11.2	1.11.2
dell emc_xc_core_6420_system_firmware	v < 2.19.1	2.19.1
dell emc_xc_core_xc640_system_firmware	v < 2.19.1	2.19.1
dell emc_xc_core_xc740xd_system_firmware	v < 2.19.1	2.19.1
dell emc_xc_core_xc740xd2_firmware	v < 2.19.1	2.19.1
dell emc_xc_core_xc940_system_firmware	v < 2.19.1	2.19.1
dell emc_xc_core_xcxr2_firmware	v < 2.19.1	2.19.1
dell emc_xc_core_xc7525_firmware	v < 2.12.4	2.12.4

Versiyanızı yoxlayın

Məhsulu seçin və istifadə etdiyiniz versiyanı yazın; versiyanın təsirlənən aralıqda olub-olmadığını görün.

MəhsulVersiya

Intelligence 360 paketində

Attack Surface Management

Domenlərinizə bağlı aktivləri, onlarda işləyən texnologiyaları və məlum zəiflikləri bir siyahıda görün.