Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-32460: Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalatio...

CVE-2023-32460 · published 2 years ago

Summary

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

What to do

Update dell poweredge_r660_firmware to version 1.6.6 or later.
Update dell poweredge_r760_firmware to version 1.6.6 or later.
Update dell poweredge_c6620_firmware to version 1.6.6 or later.
Update dell poweredge_mx760c_firmware to version 1.6.6 or later.
Update dell poweredge_r860_firmware to version 1.6.6 or later.
Update dell poweredge_r960_firmware to version 1.6.6 or later.
Update dell poweredge_hs5610_firmware to version 1.6.6 or later.
Update dell poweredge_hs5620_firmware to version 1.6.6 or later.
Update dell poweredge_r660xs_firmware to version 1.6.6 or later.
Update dell poweredge_r760xs_firmware to version 1.6.6 or later.
Update dell poweredge_r760xd2_firmware to version 1.6.6 or later.
Update dell poweredge_t560_firmware to version 1.6.6 or later.
Update dell poweredge_r760xa_firmware to version 1.6.6 or later.
Update dell poweredge_xr5610_firmware to version 1.6.6 or later.
Update dell poweredge_xr8610t_firmware to version 1.6.6 or later.
Update dell poweredge_xr8620t_firmware to version 1.6.6 or later.
Update dell poweredge_r6615_firmware to version 1.6.6 or later.
Update dell poweredge_r7615_firmware to version 1.6.6 or later.
Update dell poweredge_xr7620_firmware to version 1.6.6 or later.
Update dell poweredge_xe8640_firmware to version 1.3.6 or later.
Update dell poweredge_xe9640_firmware to version 1.3.6 or later.
Update dell poweredge_xe9680_firmware to version 1.3.6 or later.
Update dell poweredge_r6625_firmware to version 1.6.8 or later.
Update dell poweredge_r7625_firmware to version 1.6.8 or later.
Update dell poweredge_c6615_firmware to version 1.1.2 or later.
Update dell poweredge_r650_firmware to version 1.12.1 or later.
Update dell poweredge_r750_firmware to version 1.12.1 or later.
Update dell poweredge_r750xa_firmware to version 1.12.1 or later.
Update dell poweredge_c6520_firmware to version 1.12.1 or later.
Update dell poweredge_mx750c_firmware to version 1.12.1 or later.
Update dell poweredge_r550_firmware to version 1.12.1 or later.
Update dell poweredge_r450_firmware to version 1.12.1 or later.
Update dell poweredge_r650xs_firmware to version 1.12.1 or later.
Update dell poweredge_r750xs_firmware to version 1.12.1 or later.
Update dell poweredge_t550_firmware to version 1.12.1 or later.
Update dell poweredge_xr11_firmware to version 1.12.1 or later.
Update dell poweredge_xr12_firmware to version 1.12.1 or later.
Update dell poweredge_t150_firmware to version 1.8.1 or later.
Update dell poweredge_t350_firmware to version 1.8.1 or later.
Update dell poweredge_r250_firmware to version 1.8.1 or later.
Update dell poweredge_r350_firmware to version 1.8.1 or later.
Update dell poweredge_xr4510c_firmware to version 1.13.3 or later.
Update dell poweredge_xr4520c_firmware to version 1.13.3 or later.
Update dell poweredge_r6515_firmware to version 2.13.3 or later.
Update dell poweredge_r6525_firmware to version 2.13.3 or later.
Update dell poweredge_r7515_firmware to version 2.13.3 or later.
Update dell poweredge_r7525_firmware to version 2.13.3 or later.
Update dell poweredge_c6525_firmware to version 2.13.3 or later.
Update dell poweredge_xe8545_firmware to version 2.13.3 or later.
Update dell poweredge_r740_firmware to version 2.20.1 or later.
Update dell poweredge_r640_firmware to version 2.20.1 or later.
Update dell poweredge_r940_firmware to version 2.20.1 or later.
Update dell poweredge_r540_firmware to version 2.20.1 or later.
Update dell poweredge_r440_firmware to version 2.20.1 or later.
Update dell poweredge_t440_firmware to version 2.20.1 or later.
Update dell poweredge_xr2_firmware to version 2.20.1 or later.
Update dell poweredge_r840_firmware to version 2.20.1 or later.
Update dell poweredge_t640_firmware to version 2.20.1 or later.
Update dell poweredge_c6420_firmware to version 2.20.1 or later.
Update dell poweredge_fc640_firmware to version 2.20.1 or later.
Update dell poweredge_m640_firmware to version 2.20.1 or later.
Update dell poweredge_c4140_firmware to version 2.20.1 or later.
Update dell poweredge_mx740c_firmware to version 2.20.1 or later.
Update dell poweredge_mx840c_firmware to version 2.20.1 or later.
Update dell poweredge_r740xd_firmware to version 2.20.1 or later.
Update dell poweredge_r740xd2_firmware to version 2.20.1 or later.
Update dell poweredge_r940xa_firmware to version 2.20.1 or later.
Update dell poweredge_xe2420_firmware to version 2.20.0 or later.
Update dell poweredge_xe7420_firmware to version 2.20.0 or later.
Update dell poweredge_xe7440_firmware to version 2.20.0 or later.
Update dell poweredge_t140_firmware to version 2.15.1 or later.
Update dell poweredge_t340_firmware to version 2.15.1 or later.
Update dell poweredge_r240_firmware to version 2.15.1 or later.
Update dell poweredge_r340_firmware to version 2.15.1 or later.
Update dell poweredge_r6415_firmware to version 1.21.0 or later.
Update dell poweredge_r7415_firmware to version 1.21.0 or later.
Update dell poweredge_r7425_firmware to version 1.21.0 or later.
Update dell poweredge_r930_firmware to version 2.13.0 or later.
Update dell poweredge_r730_firmware to version 2.18.1 or later.
Update dell poweredge_r730xd_firmware to version 2.18.1 or later.
Update dell poweredge_r630_firmware to version 2.18.1 or later.
Update dell poweredge_c4130_firmware to version 2.18.1 or later.
Update dell poweredge_m630_firmware to version 2.18.1 or later.
Update dell poweredge_fc630_firmware to version 2.18.1 or later.
Update dell poweredge_fc430_firmware to version 2.18.1 or later.
Update dell poweredge_m830_firmware to version 2.18.1 or later.
Update dell poweredge_fc830_firmware to version 2.18.1 or later.
Update dell poweredge_t630_firmware to version 2.18.2 or later.
Update dell poweredge_r530_firmware to version 2.18.2 or later.
Update dell poweredge_r430_firmware to version 2.18.2 or later.
Update dell poweredge_t430_firmware to version 2.18.2 or later.
Update dell poweredge_c6320_firmware to version 2.18.2 or later.
Update dell poweredge_t130_firmware to version 2.19.1 or later.
Update dell poweredge_r230_firmware to version 2.19.1 or later.
Update dell poweredge_t330_firmware to version 2.19.1 or later.
Update dell poweredge_r330_firmware to version 2.19.1 or later.
Update dell poweredge_r830_firmware to version 1.18.1 or later.
Update dell poweredge_m640_\(pe_vrtx\)_firmware to version 2.20.1 or later.
Update dell poweredge_m630_\(pe_vrtx\)_firmware to version 2.18.1 or later.
Update dell poweredge_m830_\(pe_vrtx\)_firmware to version 2.18.1 or later.
Update dell dss_8440_firmware to version 2.20.0 or later.
Update dell nx3230_firmware to version 2.18.1 or later.
Update dell nx3330_firmware to version 2.18.1 or later.
Update dell nx430_firmware to version 2.19.1 or later.
Update dell emc_storage_nx3240_firmware to version 2.20.1 or later.
Update dell emc_storage_nx3340_firmware to version 2.20.1 or later.
Update dell emc_nx440_firmware to version 2.15.1 or later.
Update dell emc_xc_core_xc450_firmware to version 1.12.1 or later.
Update dell emc_xc_core_xc650_firmware to version 1.12.1 or later.
Update dell emc_xc_core_xc750_firmware to version 1.12.1 or later.
Update dell emc_xc_core_xc750xa_firmware to version 1.12.1 or later.
Update dell emc_xc_core_xc6520_firmware to version 1.12.1 or later.
Update dell emc_xc_core_xcxr2_firmware to version 2.20.1 or later.
Update dell emc_xc_core_xc740xd2_firmware to version 2.20.1 or later.
Update dell emc_xc_core_xc7525_firmware to version 2.13.3 or later.
Update dell emc_xc_core_6420_firmware to version 2.20.1 or later.
Update dell emc_xc_core_xc640_firmware to version 2.20.1 or later.
Update dell emc_xc_core_xc740xd_firmware to version 2.20.1 or later.
Update dell emc_xc_core_xc940_firmware to version 2.20.1 or later.
Update dell xc_core_xc660_firmware to version 1.6.6 or later.
Update dell xc_core_xc760_firmware to version 1.6.6 or later.
Update dell xc6320_hyperconverged_appliance_firmware to version 2.18.2 or later.
Update dell xc430_hyperconverged_appliance_firmware to version 2.18.2 or later.
Update dell xc630_hyperconverged_appliance_firmware to version 2.18.1 or later.
Update dell xc730_hyperconverged_appliance_firmware to version 2.18.1 or later.
Update dell xc730xd_hyperconverged_appliance_firmware to version 2.18.1 or later.

Affected software

Vendor	Product	Affected versions
dell	poweredge_r660_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_r660_firmware::::::::`
dell	poweredge_r760_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_r760_firmware::::::::`
dell	poweredge_c6620_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_c6620_firmware::::::::`
dell	poweredge_mx760c_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_mx760c_firmware::::::::`
dell	poweredge_r860_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_r860_firmware::::::::`
dell	poweredge_r960_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_r960_firmware::::::::`
dell	poweredge_hs5610_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_hs5610_firmware::::::::`
dell	poweredge_hs5620_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_hs5620_firmware::::::::`
dell	poweredge_r660xs_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_r660xs_firmware::::::::`
dell	poweredge_r760xs_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_r760xs_firmware::::::::`
dell	poweredge_r760xd2_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_r760xd2_firmware::::::::`
dell	poweredge_t560_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_t560_firmware::::::::`
dell	poweredge_r760xa_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_r760xa_firmware::::::::`
dell	poweredge_xr5610_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_xr5610_firmware::::::::`
dell	poweredge_xr8610t_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_xr8610t_firmware::::::::`
dell	poweredge_xr8620t_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_xr8620t_firmware::::::::`
dell	poweredge_r6615_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_r6615_firmware::::::::`
dell	poweredge_r7615_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_r7615_firmware::::::::`
dell	poweredge_xr7620_firmware	< 1.6.6 `cpe:2.3:o:dell:poweredge_xr7620_firmware::::::::`
dell	poweredge_xe8640_firmware	< 1.3.6 `cpe:2.3:o:dell:poweredge_xe8640_firmware::::::::`
dell	poweredge_xe9640_firmware	< 1.3.6 `cpe:2.3:o:dell:poweredge_xe9640_firmware::::::::`
dell	poweredge_xe9680_firmware	< 1.3.6 `cpe:2.3:o:dell:poweredge_xe9680_firmware::::::::`
dell	poweredge_r6625_firmware	< 1.6.8 `cpe:2.3:o:dell:poweredge_r6625_firmware::::::::`
dell	poweredge_r7625_firmware	< 1.6.8 `cpe:2.3:o:dell:poweredge_r7625_firmware::::::::`
dell	poweredge_c6615_firmware	< 1.1.2 `cpe:2.3:o:dell:poweredge_c6615_firmware::::::::`
dell	poweredge_r650_firmware	< 1.12.1 `cpe:2.3:o:dell:poweredge_r650_firmware::::::::`
dell	poweredge_r750_firmware	< 1.12.1 `cpe:2.3:o:dell:poweredge_r750_firmware::::::::`
dell	poweredge_r750xa_firmware	< 1.12.1 `cpe:2.3:o:dell:poweredge_r750xa_firmware::::::::`
dell	poweredge_c6520_firmware	< 1.12.1 `cpe:2.3:o:dell:poweredge_c6520_firmware::::::::`
dell	poweredge_mx750c_firmware	< 1.12.1 `cpe:2.3:o:dell:poweredge_mx750c_firmware::::::::`
dell	poweredge_r550_firmware	< 1.12.1 `cpe:2.3:o:dell:poweredge_r550_firmware::::::::`
dell	poweredge_r450_firmware	< 1.12.1 `cpe:2.3:o:dell:poweredge_r450_firmware::::::::`
dell	poweredge_r650xs_firmware	< 1.12.1 `cpe:2.3:o:dell:poweredge_r650xs_firmware::::::::`
dell	poweredge_r750xs_firmware	< 1.12.1 `cpe:2.3:o:dell:poweredge_r750xs_firmware::::::::`
dell	poweredge_t550_firmware	< 1.12.1 `cpe:2.3:o:dell:poweredge_t550_firmware::::::::`
dell	poweredge_xr11_firmware	< 1.12.1 `cpe:2.3:o:dell:poweredge_xr11_firmware::::::::`
dell	poweredge_xr12_firmware	< 1.12.1 `cpe:2.3:o:dell:poweredge_xr12_firmware::::::::`
dell	poweredge_t150_firmware	< 1.8.1 `cpe:2.3:o:dell:poweredge_t150_firmware::::::::`
dell	poweredge_t350_firmware	< 1.8.1 `cpe:2.3:o:dell:poweredge_t350_firmware::::::::`
dell	poweredge_r250_firmware	< 1.8.1 `cpe:2.3:o:dell:poweredge_r250_firmware::::::::`
dell	poweredge_r350_firmware	< 1.8.1 `cpe:2.3:o:dell:poweredge_r350_firmware::::::::`
dell	poweredge_xr4510c_firmware	< 1.13.3 `cpe:2.3:o:dell:poweredge_xr4510c_firmware::::::::`
dell	poweredge_xr4520c_firmware	< 1.13.3 `cpe:2.3:o:dell:poweredge_xr4520c_firmware::::::::`
dell	poweredge_r6515_firmware	< 2.13.3 `cpe:2.3:o:dell:poweredge_r6515_firmware::::::::`
dell	poweredge_r6525_firmware	< 2.13.3 `cpe:2.3:o:dell:poweredge_r6525_firmware::::::::`
dell	poweredge_r7515_firmware	< 2.13.3 `cpe:2.3:o:dell:poweredge_r7515_firmware::::::::`
dell	poweredge_r7525_firmware	< 2.13.3 `cpe:2.3:o:dell:poweredge_r7525_firmware::::::::`
dell	poweredge_c6525_firmware	< 2.13.3 `cpe:2.3:o:dell:poweredge_c6525_firmware::::::::`
dell	poweredge_xe8545_firmware	< 2.13.3 `cpe:2.3:o:dell:poweredge_xe8545_firmware::::::::`
dell	poweredge_r740_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_r740_firmware::::::::`

Showing 50 of 126. Show the rest

Vendor	Product	Affected versions
dell	poweredge_r640_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_r640_firmware::::::::`
dell	poweredge_r940_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_r940_firmware::::::::`
dell	poweredge_r540_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_r540_firmware::::::::`
dell	poweredge_r440_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_r440_firmware::::::::`
dell	poweredge_t440_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_t440_firmware::::::::`
dell	poweredge_xr2_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_xr2_firmware::::::::`
dell	poweredge_r840_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_r840_firmware::::::::`
dell	poweredge_t640_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_t640_firmware::::::::`
dell	poweredge_c6420_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_c6420_firmware::::::::`
dell	poweredge_fc640_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_fc640_firmware::::::::`
dell	poweredge_m640_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_m640_firmware::::::::`
dell	poweredge_c4140_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_c4140_firmware::::::::`
dell	poweredge_mx740c_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_mx740c_firmware::::::::`
dell	poweredge_mx840c_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_mx840c_firmware::::::::`
dell	poweredge_r740xd_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_r740xd_firmware::::::::`
dell	poweredge_r740xd2_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_r740xd2_firmware::::::::`
dell	poweredge_r940xa_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_r940xa_firmware::::::::`
dell	poweredge_xe2420_firmware	< 2.20.0 `cpe:2.3:o:dell:poweredge_xe2420_firmware::::::::`
dell	poweredge_xe7420_firmware	< 2.20.0 `cpe:2.3:o:dell:poweredge_xe7420_firmware::::::::`
dell	poweredge_xe7440_firmware	< 2.20.0 `cpe:2.3:o:dell:poweredge_xe7440_firmware::::::::`
dell	poweredge_t140_firmware	< 2.15.1 `cpe:2.3:o:dell:poweredge_t140_firmware::::::::`
dell	poweredge_t340_firmware	< 2.15.1 `cpe:2.3:o:dell:poweredge_t340_firmware::::::::`
dell	poweredge_r240_firmware	< 2.15.1 `cpe:2.3:o:dell:poweredge_r240_firmware::::::::`
dell	poweredge_r340_firmware	< 2.15.1 `cpe:2.3:o:dell:poweredge_r340_firmware::::::::`
dell	poweredge_r6415_firmware	< 1.21.0 `cpe:2.3:o:dell:poweredge_r6415_firmware::::::::`
dell	poweredge_r7415_firmware	< 1.21.0 `cpe:2.3:o:dell:poweredge_r7415_firmware::::::::`
dell	poweredge_r7425_firmware	< 1.21.0 `cpe:2.3:o:dell:poweredge_r7425_firmware::::::::`
dell	poweredge_r930_firmware	< 2.13.0 `cpe:2.3:o:dell:poweredge_r930_firmware::::::::`
dell	poweredge_r730_firmware	< 2.18.1 `cpe:2.3:o:dell:poweredge_r730_firmware::::::::`
dell	poweredge_r730xd_firmware	< 2.18.1 `cpe:2.3:o:dell:poweredge_r730xd_firmware::::::::`
dell	poweredge_r630_firmware	< 2.18.1 `cpe:2.3:o:dell:poweredge_r630_firmware::::::::`
dell	poweredge_c4130_firmware	< 2.18.1 `cpe:2.3:o:dell:poweredge_c4130_firmware::::::::`
dell	poweredge_m630_firmware	< 2.18.1 `cpe:2.3:o:dell:poweredge_m630_firmware::::::::`
dell	poweredge_fc630_firmware	< 2.18.1 `cpe:2.3:o:dell:poweredge_fc630_firmware::::::::`
dell	poweredge_fc430_firmware	< 2.18.1 `cpe:2.3:o:dell:poweredge_fc430_firmware::::::::`
dell	poweredge_m830_firmware	< 2.18.1 `cpe:2.3:o:dell:poweredge_m830_firmware::::::::`
dell	poweredge_fc830_firmware	< 2.18.1 `cpe:2.3:o:dell:poweredge_fc830_firmware::::::::`
dell	poweredge_t630_firmware	< 2.18.2 `cpe:2.3:o:dell:poweredge_t630_firmware::::::::`
dell	poweredge_r530_firmware	< 2.18.2 `cpe:2.3:o:dell:poweredge_r530_firmware::::::::`
dell	poweredge_r430_firmware	< 2.18.2 `cpe:2.3:o:dell:poweredge_r430_firmware::::::::`
dell	poweredge_t430_firmware	< 2.18.2 `cpe:2.3:o:dell:poweredge_t430_firmware::::::::`
dell	poweredge_c6320_firmware	< 2.18.2 `cpe:2.3:o:dell:poweredge_c6320_firmware::::::::`
dell	poweredge_t130_firmware	< 2.19.1 `cpe:2.3:o:dell:poweredge_t130_firmware::::::::`
dell	poweredge_r230_firmware	< 2.19.1 `cpe:2.3:o:dell:poweredge_r230_firmware::::::::`
dell	poweredge_t330_firmware	< 2.19.1 `cpe:2.3:o:dell:poweredge_t330_firmware::::::::`
dell	poweredge_r330_firmware	< 2.19.1 `cpe:2.3:o:dell:poweredge_r330_firmware::::::::`
dell	poweredge_r830_firmware	< 1.18.1 `cpe:2.3:o:dell:poweredge_r830_firmware::::::::`
dell	poweredge_m640_\(pe_vrtx\)_firmware	< 2.20.1 `cpe:2.3:o:dell:poweredge_m640_\(pe_vrtx\)_firmware::::::::`
dell	poweredge_m630_\(pe_vrtx\)_firmware	< 2.18.1 `cpe:2.3:o:dell:poweredge_m630_\(pe_vrtx\)_firmware::::::::`
dell	poweredge_m830_\(pe_vrtx\)_firmware	< 2.18.1 `cpe:2.3:o:dell:poweredge_m830_\(pe_vrtx\)_firmware::::::::`
dell	dss_8440_firmware	< 2.20.0 `cpe:2.3:o:dell:dss_8440_firmware::::::::`
dell	nx3230_firmware	< 2.18.1 `cpe:2.3:o:dell:nx3230_firmware::::::::`
dell	nx3330_firmware	< 2.18.1 `cpe:2.3:o:dell:nx3330_firmware::::::::`
dell	nx430_firmware	< 2.19.1 `cpe:2.3:o:dell:nx430_firmware::::::::`
dell	emc_storage_nx3240_firmware	< 2.20.1 `cpe:2.3:o:dell:emc_storage_nx3240_firmware::::::::`
dell	emc_storage_nx3340_firmware	< 2.20.1 `cpe:2.3:o:dell:emc_storage_nx3340_firmware::::::::`
dell	emc_nx440_firmware	< 2.15.1 `cpe:2.3:o:dell:emc_nx440_firmware::::::::`
dell	emc_xc_core_xc450_firmware	< 1.12.1 `cpe:2.3:o:dell:emc_xc_core_xc450_firmware::::::::`
dell	emc_xc_core_xc650_firmware	< 1.12.1 `cpe:2.3:o:dell:emc_xc_core_xc650_firmware::::::::`
dell	emc_xc_core_xc750_firmware	< 1.12.1 `cpe:2.3:o:dell:emc_xc_core_xc750_firmware::::::::`
dell	emc_xc_core_xc750xa_firmware	< 1.12.1 `cpe:2.3:o:dell:emc_xc_core_xc750xa_firmware::::::::`
dell	emc_xc_core_xc6520_firmware	< 1.12.1 `cpe:2.3:o:dell:emc_xc_core_xc6520_firmware::::::::`
dell	emc_xc_core_xcxr2_firmware	< 2.20.1 `cpe:2.3:o:dell:emc_xc_core_xcxr2_firmware::::::::`
dell	emc_xc_core_xc740xd2_firmware	< 2.20.1 `cpe:2.3:o:dell:emc_xc_core_xc740xd2_firmware::::::::`
dell	emc_xc_core_xc7525_firmware	< 2.13.3 `cpe:2.3:o:dell:emc_xc_core_xc7525_firmware::::::::`
dell	emc_xc_core_6420_firmware	< 2.20.1 `cpe:2.3:o:dell:emc_xc_core_6420_firmware::::::::`
dell	emc_xc_core_xc640_firmware	< 2.20.1 `cpe:2.3:o:dell:emc_xc_core_xc640_firmware::::::::`
dell	emc_xc_core_xc740xd_firmware	< 2.20.1 `cpe:2.3:o:dell:emc_xc_core_xc740xd_firmware::::::::`
dell	emc_xc_core_xc940_firmware	< 2.20.1 `cpe:2.3:o:dell:emc_xc_core_xc940_firmware::::::::`
dell	xc_core_xc660_firmware	< 1.6.6 `cpe:2.3:o:dell:xc_core_xc660_firmware::::::::`
dell	xc_core_xc760_firmware	< 1.6.6 `cpe:2.3:o:dell:xc_core_xc760_firmware::::::::`
dell	xc6320_hyperconverged_appliance_firmware	< 2.18.2 `cpe:2.3:o:dell:xc6320_hyperconverged_appliance_firmware::::::::`
dell	xc430_hyperconverged_appliance_firmware	< 2.18.2 `cpe:2.3:o:dell:xc430_hyperconverged_appliance_firmware::::::::`
dell	xc630_hyperconverged_appliance_firmware	< 2.18.1 `cpe:2.3:o:dell:xc630_hyperconverged_appliance_firmware::::::::`
dell	xc730_hyperconverged_appliance_firmware	< 2.18.1 `cpe:2.3:o:dell:xc730_hyperconverged_appliance_firmware::::::::`
dell	xc730xd_hyperconverged_appliance_firmware	< 2.18.1 `cpe:2.3:o:dell:xc730xd_hyperconverged_appliance_firmware::::::::`

Original advisory text

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalatio...

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

References

https://www.dell.com/support/kbdoc/en-us/000219550/dsa-2023-361-security-update-... Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-306Missing Authentication for Critical Function

Timeline

Published8 Dec 2023

Updated29 Oct 2026

First seen29 Sep 2026

Sources

CVE-2023-32460 · NVD

Track software like this

Free during beta