CVE-2024-0172 — Dell / PowerEdge Platform

Description (CNA)

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

Affected (CNA)

Vendor / product	Versions
Dell / PowerEdge Platform	affected N/A before 1.5.6; affected N/A before 1.1.3; affected N/A before 1.1.4; affected N/A before 1.2.5; affected N/A before 1.3.6; affected N/A before 1.4.6; affected N/A before 1.11.2; affected N/A before 1.7.3; affected N/A before 1.12.1; affected N/A before 2.12.4; affected N/A before 2.19.1; affected N/A before 2.19.0; affected N/A before 2.14.1; affected N/A before 1.20.0

CWE

CWE-269

References

https://www.dell.com/support/kbdoc/en-us/000223727/dsa-2024-035-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000223727/dsa-2024-035-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability

CISA-ADP

No English description supplied.

No references supplied.