CVE-2024-0171
Medium
Description
Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.
SeverityMedium
CVSS5.3
Exploit probability—
ProductDell Poweredge R6615 Firmware
PublishedJun 25, 2024
First seenJun 25, 2024
Weakness typeCWE-367CWE-367
How to fix
Update
- dell poweredge_r6615_firmware1.8.3 or later
- dell poweredge_r7615_firmware1.8.3 or later
- dell poweredge_r6625_firmware1.8.3 or later
- dell poweredge_r7625_firmware1.8.3 or later
- dell poweredge_c6615_firmware1.3.3 or later
- dell xc_core_xc7625_firmware1.8.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell poweredge_r6615_firmware | v < 1.8.3 | 1.8.3 |
| dell poweredge_r7615_firmware | v < 1.8.3 | 1.8.3 |
| dell poweredge_r6625_firmware | v < 1.8.3 | 1.8.3 |
| dell poweredge_r7625_firmware | v < 1.8.3 | 1.8.3 |
| dell poweredge_c6615_firmware | v < 1.3.3 | 1.3.3 |
| dell xc_core_xc7625_firmware | v < 1.8.3 | 1.8.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.