CVE-2024-0163
Medium
Description
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.
SeverityMedium
CVSS5.3
Exploit probability—
ProductDell Poweredge R660 Firmware
PublishedMar 13, 2024
First seenMar 13, 2024
Weakness typeCWE-367CWE-367
How to fix
Update
- dell poweredge_r660_firmware2.0.0 or later
- dell poweredge_r760_firmware2.0.0 or later
- dell poweredge_c6620_firmware2.0.0 or later
- dell poweredge_mx760c_firmware2.0.0 or later
- dell poweredge_r860_firmware1.8.0 or later
- dell poweredge_r960_firmware1.8.0 or later
- dell poweredge_hs5610_firmware2.0.0 or later
- dell poweredge_hs5620_firmware2.0.0 or later
- dell poweredge_r660xs_firmware2.0.0 or later
- dell poweredge_r760xs_firmware2.0.0 or later
- dell poweredge_r760xd2_firmware2.0.0 or later
- dell poweredge_t560_firmware2.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell poweredge_r660_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_r760_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_c6620_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_mx760c_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_r860_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_r960_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_hs5610_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_hs5620_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_r660xs_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_r760xs_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_r760xd2_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_t560_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_r760xa_firmware | v < 2.0.0 | 2.0.0 |
| dell poweredge_xe9680_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_xr5610_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_xr8610t_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_xr8620t_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_xr7620_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_xe8640_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_xe9640_firmware | v < 1.8.0 | 1.8.0 |
| dell poweredge_r6615_firmware | v < 1.7.2 | 1.7.2 |
| dell poweredge_r7615_firmware | v < 1.7.2 | 1.7.2 |
| dell poweredge_r6625_firmware | v < 1.7.2 | 1.7.2 |
| dell poweredge_r7625_firmware | v < 1.7.2 | 1.7.2 |
| dell poweredge_c6615_firmware | v < 1.2.3 | 1.2.3 |
| dell poweredge_r650_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_r750_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_r750xa_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_c6520_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_mx750c_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_r550_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_r450_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_r650xs_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_r750xs_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_t550_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_xr11_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_xr12_firmware | v < 1.13.2 | 1.13.2 |
| dell poweredge_t150_firmware | v < 1.9.1 | 1.9.1 |
| dell poweredge_t350_firmware | v < 1.9.1 | 1.9.1 |
| dell poweredge_r250_firmware | v < 1.9.1 | 1.9.1 |
| dell poweredge_r350_firmware | v < 1.9.1 | 1.9.1 |
| dell poweredge_xr4510c_firmware | v < 1.14.1 | 1.14.1 |
| dell poweredge_xr4520c_firmware | v < 1.14.1 | 1.14.1 |
| dell poweredge_r6515_firmware | v < 2.14.1 | 2.14.1 |
| dell poweredge_r6525_firmware | v < 2.14.1 | 2.14.1 |
| dell poweredge_r7515_firmware | v < 2.14.1 | 2.14.1 |
| dell poweredge_r7525_firmware | v < 2.14.1 | 2.14.1 |
| dell poweredge_c6525_firmware | v < 2.14.1 | 2.14.1 |
| dell poweredge_xe8545_firmware | v < 2.14.1 | 2.14.1 |
| dell xc_core_xc660_firmware | v < 2.0.0 | 2.0.0 |
| dell xc_core_xc760_firmware | v < 2.0.0 | 2.0.0 |
| dell xc_core_xc7625_firmware | v < 1.7.2 | 1.7.2 |
| dell emc_xc_core_xc450_firmware | v < 1.13.2 | 1.13.2 |
| dell emc_xc_core_xc650_firmware | v < 1.13.2 | 1.13.2 |
| dell emc_xc_core_xc750_firmware | v < 1.13.2 | 1.13.2 |
| dell emc_xc_core_xc750xa_firmware | v < 1.13.2 | 1.13.2 |
| dell emc_xc_core_xc6520_firmware | v < 1.13.2 | 1.13.2 |
| dell emc_xc_core_xc7525_firmware | v < 2.14.1 | 2.14.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.