medium5.3
CVE-2024-0163
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability.
Impact
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Poweredge R660 Firmware | before 2.0.0 |
| Dell | Poweredge R760 Firmware | before 2.0.0 |
| Dell | Poweredge C6620 Firmware | before 2.0.0 |
| Dell | Poweredge Mx760c Firmware | before 2.0.0 |
| Dell | Poweredge R860 Firmware | before 1.8.0 |
| Dell | Poweredge R960 Firmware | before 1.8.0 |
| Dell | Poweredge Hs5610 Firmware | before 2.0.0 |
| Dell | Poweredge Hs5620 Firmware | before 2.0.0 |
| Dell | Poweredge R660xs Firmware | before 2.0.0 |
| Dell | Poweredge R760xs Firmware | before 2.0.0 |
| Dell | Poweredge R760xd2 Firmware | before 2.0.0 |
| Dell | Poweredge T560 Firmware | before 2.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000222756/dsa-2024-003-security-update-for-dell-poweredge-server-bios-for-a-time-of-check-time-of-use-toctou-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000222756/dsa-2024-003-security-update-for-dell-poweredge-server-bios-for-a-time-of-check-time-of-use-toctou-vulnerability