CVE-2024-0172

High

Description

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

SeverityHigh

CVSS7.9

Exploit probability—

ProductDell Poweredge R660 Firmware

PublishedApr 3, 2024

First seenApr 3, 2024

Weakness typeCWE-269Improper privilege management

How to fix

Update

dell poweredge_r660_firmware1.5.6 or later
dell poweredge_r760_firmware1.5.6 or later
dell poweredge_c6620_firmware1.5.6 or later
dell poweredge_mx760c_firmware1.5.6 or later
dell poweredge_r860_firmware1.5.6 or later
dell poweredge_r960_firmware1.5.6 or later
dell poweredge_hs5610_firmware1.5.6 or later
dell poweredge_hs5620_firmware1.5.6 or later
dell poweredge_r660xs_firmware1.5.6 or later
dell poweredge_r760xs_firmware1.5.6 or later
dell poweredge_r760xd2_firmware1.5.6 or later
dell poweredge_t560_firmware1.5.6 or later

Vendor advisories

dell.com/support/kbdoc/en-us/000223727/dsa-2024-035-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability

Affected products

Product	Affected versions	Fixed in
dell poweredge_r660_firmware	v < 1.5.6	1.5.6
dell poweredge_r760_firmware	v < 1.5.6	1.5.6
dell poweredge_c6620_firmware	v < 1.5.6	1.5.6
dell poweredge_mx760c_firmware	v < 1.5.6	1.5.6
dell poweredge_r860_firmware	v < 1.5.6	1.5.6
dell poweredge_r960_firmware	v < 1.5.6	1.5.6
dell poweredge_hs5610_firmware	v < 1.5.6	1.5.6
dell poweredge_hs5620_firmware	v < 1.5.6	1.5.6
dell poweredge_r660xs_firmware	v < 1.5.6	1.5.6
dell poweredge_r760xs_firmware	v < 1.5.6	1.5.6
dell poweredge_r760xd2_firmware	v < 1.5.6	1.5.6
dell poweredge_t560_firmware	v < 1.5.6	1.5.6
dell poweredge_r760xa_firmware	v < 1.1.3	1.1.3
dell poweredge_xe9680_firmware	v < 1.1.3	1.1.3
dell poweredge_xr5610_firmware	v < 1.1.4	1.1.4
dell poweredge_xr8610t_firmware	v < 1.1.3	1.1.3
dell poweredge_xr8620t_firmware	v < 1.1.3	1.1.3
dell poweredge_xr7620_firmware	v < 1.5.6	1.5.6
dell poweredge_xe8640_firmware	v < 1.2.5	1.2.5
dell poweredge_xe9640_firmware	v < 1.3.6	1.3.6
dell poweredge_r6615_firmware	v < 1.4.6	1.4.6
dell poweredge_r7615_firmware	v < 1.4.6	1.4.6
dell poweredge_r6625_firmware	v < 1.4.6	1.4.6
dell poweredge_r7625_firmware	v < 1.4.6	1.4.6
dell poweredge_r650_firmware	v < 1.11.2	1.11.2
dell poweredge_r750_firmware	v < 1.11.2	1.11.2
dell poweredge_r750xa_firmware	v < 1.11.2	1.11.2
dell poweredge_c6520_firmware	v < 1.11.2	1.11.2
dell poweredge_mx750c_firmware	v < 1.11.2	1.11.2
dell poweredge_r550_firmware	v < 1.11.2	1.11.2
dell poweredge_r450_firmware	v < 1.11.2	1.11.2
dell poweredge_r650xs_firmware	v < 1.11.2	1.11.2
dell poweredge_r750xs_firmware	v < 1.11.2	1.11.2
dell poweredge_t550_firmware	v < 1.11.2	1.11.2
dell poweredge_xr11_firmware	v < 1.11.2	1.11.2
dell poweredge_xr12_firmware	v < 1.11.2	1.11.2
dell poweredge_t150_firmware	v < 1.7.3	1.7.3
dell poweredge_t350_firmware	v < 1.7.3	1.7.3
dell poweredge_r250_firmware	v < 1.7.3	1.7.3
dell poweredge_r350_firmware	v < 1.7.3	1.7.3
dell poweredge_xr4510c_firmware	v < 1.12.1	1.12.1
dell poweredge_xr4520c_firmware	v < 1.12.1	1.12.1
dell poweredge_r6515_firmware	v < 2.12.4	2.12.4
dell poweredge_r6525_firmware	v < 2.12.4	2.12.4
dell poweredge_r7515_firmware	v < 2.12.4	2.12.4
dell poweredge_r7525_firmware	v < 2.12.4	2.12.4
dell poweredge_c6525_firmware	v < 2.12.4	2.12.4
dell poweredge_xe8545_firmware	v < 2.12.4	2.12.4
dell poweredge_r740_firmware	v < 2.19.1	2.19.1
dell poweredge_r740xd_firmware	v < 2.19.1	2.19.1
dell poweredge_r640_firmware	v < 2.19.1	2.19.1
dell poweredge_r940_firmware	v < 2.19.1	2.19.1
dell poweredge_r540_firmware	v < 2.19.1	2.19.1
dell poweredge_r440_firmware	v < 2.19.1	2.19.1
dell poweredge_t440_firmware	v < 2.19.1	2.19.1
dell poweredge_xr2_firmware	v < 2.19.1	2.19.1
dell poweredge_r740xd2_firmware	v < 2.19.1	2.19.1
dell poweredge_r840_firmware	v < 2.19.1	2.19.1
dell poweredge_r940xa_firmware	v < 2.19.1	2.19.1
dell poweredge_t640_firmware	v < 2.19.1	2.19.1
dell poweredge_c6420_firmware	v < 2.19.1	2.19.1
dell poweredge_fc640_firmware	v < 2.19.1	2.19.1
dell poweredge_m640_firmware	v < 2.19.1	2.19.1
dell poweredge_m640_\(pe_vrtx\)_firmware	v < 2.19.1	2.19.1
dell poweredge_mx740c_firmware	v < 2.19.1	2.19.1
dell poweredge_mx840c_firmware	v < 2.19.1	2.19.1
dell poweredge_c4140_firmware	v < 2.19.1	2.19.1
dell dss_8440_firmware	v < 2.19.0	2.19.0
dell poweredge_xe2420_firmware	v < 2.19.0	2.19.0
dell poweredge_xe7420_firmware	v < 2.19.0	2.19.0
dell poweredge_xe7440_firmware	v < 2.19.0	2.19.0
dell poweredge_t140_firmware	v < 2.14.1	2.14.1
dell poweredge_t340_firmware	v < 2.14.1	2.14.1
dell poweredge_r240_firmware	v < 2.14.1	2.14.1
dell poweredge_r340_firmware	v < 2.14.1	2.14.1
dell poweredge_r6415_firmware	v < 1.20.0	1.20.0
dell poweredge_r7415_firmware	v < 1.20.0	1.20.0
dell poweredge_r7425_firmware	v < 1.20.0	1.20.0
dell emc_storage_nx3240_firmware	v < 2.19.1	2.19.1
dell emc_storage_nx3340_firmware	v < 2.19.1	2.19.1
dell nx440_firmware	v < 2.14.1	2.14.1
dell emc_xc_core_xc450_firmware	v < 1.11.2	1.11.2
dell emc_xc_core_xc650_firmware	v < 1.11.2	1.11.2
dell emc_xc_core_xc750_firmware	v < 1.11.2	1.11.2
dell emc_xc_core_xc750xa_firmware	v < 1.11.2	1.11.2
dell emc_xc_core_xc6520_firmware	v < 1.11.2	1.11.2
dell emc_xc_core_6420_system_firmware	v < 2.19.1	2.19.1
dell emc_xc_core_xc640_system_firmware	v < 2.19.1	2.19.1
dell emc_xc_core_xc740xd_system_firmware	v < 2.19.1	2.19.1
dell emc_xc_core_xc740xd2_firmware	v < 2.19.1	2.19.1
dell emc_xc_core_xc940_system_firmware	v < 2.19.1	2.19.1
dell emc_xc_core_xcxr2_firmware	v < 2.19.1	2.19.1
dell emc_xc_core_xc7525_firmware	v < 2.12.4	2.12.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

ProductVersion

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.