high8.8
CVE-2023-32460
Dell PowerEdge BIOS contains an improper privilege management security vulnerability.
Impact
Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Poweredge R660 Firmware | before 1.6.6 |
| Dell | Poweredge R760 Firmware | before 1.6.6 |
| Dell | Poweredge C6620 Firmware | before 1.6.6 |
| Dell | Poweredge Mx760c Firmware | before 1.6.6 |
| Dell | Poweredge R860 Firmware | before 1.6.6 |
| Dell | Poweredge R960 Firmware | before 1.6.6 |
| Dell | Poweredge Hs5610 Firmware | before 1.6.6 |
| Dell | Poweredge Hs5620 Firmware | before 1.6.6 |
| Dell | Poweredge R660xs Firmware | before 1.6.6 |
| Dell | Poweredge R760xs Firmware | before 1.6.6 |
| Dell | Poweredge R760xd2 Firmware | before 1.6.6 |
| Dell | Poweredge T560 Firmware | before 1.6.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000219550/dsa-2023-361-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000219550/dsa-2023-361-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability