1. Home
  2. CVE Database
  3. CVE-2024-0172
HIGH · 7.9

CVE-2024-0172

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability,...

Vulnerability Description

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

CVSS Score

7.9

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
DellPoweredge R660 Firmware< 1.5.6
DellPoweredge R660-
DellPoweredge R760 Firmware< 1.5.6
DellPoweredge R760-
DellPoweredge C6620 Firmware< 1.5.6
DellPoweredge C6620-
DellPoweredge Mx760C Firmware< 1.5.6
DellPoweredge Mx760C-
DellPoweredge R860 Firmware< 1.5.6
DellPoweredge R860-
DellPoweredge R960 Firmware< 1.5.6
DellPoweredge R960-
DellPoweredge Hs5610 Firmware< 1.5.6
DellPoweredge Hs5610-
DellPoweredge Hs5620 Firmware< 1.5.6
DellPoweredge Hs5620-
DellPoweredge R660Xs Firmware< 1.5.6
DellPoweredge R660Xs-
DellPoweredge R760Xs Firmware< 1.5.6
DellPoweredge R760Xs-

Related Weaknesses (CWE)

CWE-269

References

FAQ

What is CVE-2024-0172?

CVE-2024-0172 is a vulnerability with a CVSS score of 7.9 (HIGH). Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability,...

How severe is CVE-2024-0172?

CVE-2024-0172 has been rated HIGH with a CVSS base score of 7.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-0172?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Poweredge R660 Firmware, Dell Poweredge R660, Dell Poweredge R760 Firmware, Dell Poweredge R760, Dell Poweredge C6620 Firmware.