Threat Investigation
Request a demo

CVE-2023-32461

Medium

Description

Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges.  

SeverityMedium
CVSS5.0
Exploit probability—
ProductDell Poweredge R660 Firmware
PublishedSep 15, 2023
First seenSep 15, 2023
Weakness typeCWE-122CWE-122

How to fix

Update
  • dell poweredge_r660_firmware1.5.6 or later
  • dell poweredge_r760_firmware1.5.6 or later
  • dell poweredge_c6620_firmware1.5.6 or later
  • dell poweredge_mx760c_firmware1.5.6 or later
  • dell poweredge_r860_firmware1.5.6 or later
  • dell poweredge_r960_firmware1.5.6 or later
  • dell poweredge_hs5610_firmware1.5.6 or later
  • dell poweredge_hs5620_firmware1.5.6 or later
  • dell poweredge_r660xs_firmware1.5.6 or later
  • dell poweredge_r760xs_firmware1.5.6 or later
  • dell poweredge_r760xd2_firmware1.5.6 or later
  • dell poweredge_t560_firmware1.5.6 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
dell poweredge_r660_firmwarev < 1.5.61.5.6
dell poweredge_r760_firmwarev < 1.5.61.5.6
dell poweredge_c6620_firmwarev < 1.5.61.5.6
dell poweredge_mx760c_firmwarev < 1.5.61.5.6
dell poweredge_r860_firmwarev < 1.5.61.5.6
dell poweredge_r960_firmwarev < 1.5.61.5.6
dell poweredge_hs5610_firmwarev < 1.5.61.5.6
dell poweredge_hs5620_firmwarev < 1.5.61.5.6
dell poweredge_r660xs_firmwarev < 1.5.61.5.6
dell poweredge_r760xs_firmwarev < 1.5.61.5.6
dell poweredge_r760xd2_firmwarev < 1.5.61.5.6
dell poweredge_t560_firmwarev < 1.5.61.5.6
dell poweredge_r760xa_firmwarev < 1.1.31.1.3
dell poweredge_xe9680_firmwarev < 1.1.31.1.3
dell poweredge_xr5610_firmwarev < 1.1.41.1.4
dell poweredge_xr8620t_firmwarev < 1.1.31.1.3
dell poweredge_xr7620_firmwarev < 1.5.61.5.6
dell poweredge_xe8640_firmwarev < 1.2.51.2.5
dell poweredge_r6615_firmwarev < 1.3.111.3.11
dell poweredge_r7615_firmwarev < 1.3.111.3.11
dell poweredge_r6625_firmwarev < 1.3.111.3.11
dell poweredge_r7625_firmwarev < 1.3.111.3.11
dell poweredge_r650_firmwarev < 1.10.21.10.2
dell poweredge_r750_firmwarev < 1.10.21.10.2
dell poweredge_r750xa_firmwarev < 1.10.21.10.2
dell poweredge_c6520_firmwarev < 1.10.21.10.2
dell poweredge_mx750c_firmwarev < 1.10.21.10.2
dell poweredge_r550_firmwarev < 1.10.21.10.2
dell poweredge_r450_firmwarev < 1.10.21.10.2
dell poweredge_r650xs_firmwarev < 1.10.21.10.2
dell poweredge_r750xs_firmwarev < 1.10.21.10.2
dell poweredge_t550_firmwarev < 1.10.21.10.2
dell poweredge_xr11_firmwarev < 1.10.21.10.2
dell poweredge_xr12_firmwarev < 1.10.21.10.2
dell poweredge_t150_firmwarev < 1.6.31.6.3
dell poweredge_t350_firmwarev < 1.6.31.6.3
dell poweredge_r250_firmwarev < 1.6.31.6.3
dell poweredge_r350_firmwarev < 1.6.31.6.3
dell poweredge_xr4510c_firmwarev < 1.10.41.10.4
dell poweredge_xr4520c_firmwarev < 1.10.4, 1.10.41.10.4
dell poweredge_r6515_firmwarev < 2.11.42.11.4
dell poweredge_r6525_firmwarev < 2.11.32.11.3
dell poweredge_r7515_firmwarev < 2.11.42.11.4
dell poweredge_r7525_firmwarev < 2.11.32.11.3
dell poweredge_c6525_firmwarev < 2.11.32.11.3
dell poweredge_xe8545_firmwarev < 2.11.32.11.3
dell emc_xc_core_xc450_firmwarev < 1.11.21.11.2
dell emc_xc_core_xc650_firmwarev < 1.11.21.11.2
dell emc_xc_core_xc750_firmwarev < 1.11.21.11.2
dell emc_xc_core_xc750xa_firmwarev < 1.11.21.11.2
dell emc_xc_core_xc6520_firmwarev < 1.11.21.11.2
dell emc_xc_core_xc7525_firmwarev < 2.11.32.11.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.