Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-32460

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

Published

2023-12-08T06:15:45.427

Last Modified

2024-11-21T08:03:23.720

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses

Type: Secondary
CWE-306
Type: Primary
CWE-306

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	dell	poweredge_r660_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_r660	-	No
Operating System	dell	poweredge_r760_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_r760	-	No
Operating System	dell	poweredge_c6620_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_c6620	-	No
Operating System	dell	poweredge_mx760c_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_mx760c	-	No
Operating System	dell	poweredge_r860_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_r860	-	No
Operating System	dell	poweredge_r960_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_r960	-	No
Operating System	dell	poweredge_hs5610_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_hs5610	-	No
Operating System	dell	poweredge_hs5620_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_hs5620	-	No
Operating System	dell	poweredge_r660xs_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_r660xs	-	No
Operating System	dell	poweredge_r760xs_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_r760xs	-	No
Operating System	dell	poweredge_r760xd2_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_r760xd2	-	No
Operating System	dell	poweredge_t560_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_t560	-	No
Operating System	dell	poweredge_r760xa_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_r760xa	-	No
Operating System	dell	poweredge_xr5610_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_xr5610	-	No
Operating System	dell	poweredge_xr8610t_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_xr8610t	-	No
Operating System	dell	poweredge_xr8620t_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_xr8620t	-	No
Operating System	dell	poweredge_r6615_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_r6615	-	No
Operating System	dell	poweredge_r7615_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_r7615	-	No
Operating System	dell	poweredge_xr7620_firmware	< 1.6.6	Yes
Hardware	dell	poweredge_xr7620	-	No
Operating System	dell	poweredge_xe8640_firmware	< 1.3.6	Yes
Hardware	dell	poweredge_xe8640	-	No
Operating System	dell	poweredge_xe9640_firmware	< 1.3.6	Yes
Hardware	dell	poweredge_xe9640	-	No
Operating System	dell	poweredge_xe9680_firmware	< 1.3.6	Yes
Hardware	dell	poweredge_xe9680	-	No
Operating System	dell	poweredge_r6625_firmware	< 1.6.8	Yes
Hardware	dell	poweredge_r6625	-	No
Operating System	dell	poweredge_r7625_firmware	< 1.6.8	Yes
Hardware	dell	poweredge_r7625	-	No
Operating System	dell	poweredge_c6615_firmware	< 1.1.2	Yes
Hardware	dell	poweredge_c6615	-	No
Operating System	dell	poweredge_r650_firmware	< 1.12.1	Yes
Hardware	dell	poweredge_r650	-	No
Operating System	dell	poweredge_r750_firmware	< 1.12.1	Yes
Hardware	dell	poweredge_r750	-	No
Operating System	dell	poweredge_r750xa_firmware	< 1.12.1	Yes
Hardware	dell	poweredge_r750xa	-	No
Operating System	dell	poweredge_c6520_firmware	< 1.12.1	Yes
Hardware	dell	poweredge_c6520	-	No
Operating System	dell	poweredge_mx750c_firmware	< 1.12.1	Yes
Hardware	dell	poweredge_mx750c	-	No
Operating System	dell	poweredge_r550_firmware	< 1.12.1	Yes
Hardware	dell	poweredge_r550	-	No
Operating System	dell	poweredge_r450_firmware	< 1.12.1	Yes
Hardware	dell	poweredge_r450	-	No
Operating System	dell	poweredge_r650xs_firmware	< 1.12.1	Yes
Hardware	dell	poweredge_r650xs	-	No
Operating System	dell	poweredge_r750xs_firmware	< 1.12.1	Yes
Hardware	dell	poweredge_r750xs	-	No
Operating System	dell	poweredge_t550_firmware	< 1.12.1	Yes
Hardware	dell	poweredge_t550	-	No
Operating System	dell	poweredge_xr11_firmware	< 1.12.1	Yes
Hardware	dell	poweredge_xr11	-	No
Operating System	dell	poweredge_xr12_firmware	< 1.12.1	Yes
Hardware	dell	poweredge_xr12	-	No
Operating System	dell	poweredge_t150_firmware	< 1.8.1	Yes
Hardware	dell	poweredge_t150	-	No
Operating System	dell	poweredge_t350_firmware	< 1.8.1	Yes
Hardware	dell	poweredge_t350	-	No
Operating System	dell	poweredge_r250_firmware	< 1.8.1	Yes
Hardware	dell	poweredge_r250	-	No
Operating System	dell	poweredge_r350_firmware	< 1.8.1	Yes
Hardware	dell	poweredge_r350	-	No
Operating System	dell	poweredge_xr4510c_firmware	< 1.13.3	Yes
Hardware	dell	poweredge_xr4510c	-	No
Operating System	dell	poweredge_xr4520c_firmware	< 1.13.3	Yes
Hardware	dell	poweredge_xr4520c	-	No
Operating System	dell	poweredge_r6515_firmware	< 2.13.3	Yes
Hardware	dell	poweredge_r6515	-	No
Operating System	dell	poweredge_r6525_firmware	< 2.13.3	Yes
Hardware	dell	poweredge_r6525	-	No
Operating System	dell	poweredge_r7515_firmware	< 2.13.3	Yes
Hardware	dell	poweredge_r7515	-	No
Operating System	dell	poweredge_r7525_firmware	< 2.13.3	Yes
Hardware	dell	poweredge_r7525	-	No
Operating System	dell	poweredge_c6525_firmware	< 2.13.3	Yes
Hardware	dell	poweredge_c6525	-	No
Operating System	dell	poweredge_xe8545_firmware	< 2.13.3	Yes
Hardware	dell	poweredge_xe8545	-	No
Operating System	dell	poweredge_r740_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_r740	-	No
Operating System	dell	poweredge_r640_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_r640	-	No
Operating System	dell	poweredge_r940_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_r940	-	No
Operating System	dell	poweredge_r540_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_r540	-	No
Operating System	dell	poweredge_r440_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_r440	-	No
Operating System	dell	poweredge_t440_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_t440	-	No
Operating System	dell	poweredge_xr2_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_xr2	-	No
Operating System	dell	poweredge_r840_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_r840	-	No
Operating System	dell	poweredge_t640_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_t640	-	No
Operating System	dell	poweredge_c6420_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_c6420	-	No
Operating System	dell	poweredge_fc640_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_fc640	-	No
Operating System	dell	poweredge_m640_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_m640	-	No
Operating System	dell	poweredge_c4140_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_c4140	-	No
Operating System	dell	poweredge_mx740c_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_mx740c	-	No
Operating System	dell	poweredge_mx840c_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_mx840c	-	No
Operating System	dell	poweredge_r740xd_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_r740xd	-	No
Operating System	dell	poweredge_r740xd2_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_r740xd2	-	No
Operating System	dell	poweredge_r940xa_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_r940xa	-	No
Operating System	dell	poweredge_xe2420_firmware	< 2.20.0	Yes
Hardware	dell	poweredge_xe2420	-	No
Operating System	dell	poweredge_xe7420_firmware	< 2.20.0	Yes
Hardware	dell	poweredge_xe7420	-	No
Operating System	dell	poweredge_xe7440_firmware	< 2.20.0	Yes
Hardware	dell	poweredge_xe7440	-	No
Operating System	dell	poweredge_t140_firmware	< 2.15.1	Yes
Hardware	dell	poweredge_t140	-	No
Operating System	dell	poweredge_t340_firmware	< 2.15.1	Yes
Hardware	dell	poweredge_t340	-	No
Operating System	dell	poweredge_r240_firmware	< 2.15.1	Yes
Hardware	dell	poweredge_r240	-	No
Operating System	dell	poweredge_r340_firmware	< 2.15.1	Yes
Hardware	dell	poweredge_r340	-	No
Operating System	dell	poweredge_r6415_firmware	< 1.21.0	Yes
Hardware	dell	poweredge_r6415	-	No
Operating System	dell	poweredge_r7415_firmware	< 1.21.0	Yes
Hardware	dell	poweredge_r7415	-	No
Operating System	dell	poweredge_r7425_firmware	< 1.21.0	Yes
Hardware	dell	poweredge_r7425	-	No
Operating System	dell	poweredge_r930_firmware	< 2.13.0	Yes
Hardware	dell	poweredge_r930	-	No
Operating System	dell	poweredge_r730_firmware	< 2.18.1	Yes
Hardware	dell	poweredge_r730	-	No
Operating System	dell	poweredge_r730xd_firmware	< 2.18.1	Yes
Hardware	dell	poweredge_r730xd	-	No
Operating System	dell	poweredge_r630_firmware	< 2.18.1	Yes
Hardware	dell	poweredge_r630	-	No
Operating System	dell	poweredge_c4130_firmware	< 2.18.1	Yes
Hardware	dell	poweredge_c4130	-	No
Operating System	dell	poweredge_m630_firmware	< 2.18.1	Yes
Hardware	dell	poweredge_m630	-	No
Operating System	dell	poweredge_fc630_firmware	< 2.18.1	Yes
Hardware	dell	poweredge_fc630	-	No
Operating System	dell	poweredge_fc430_firmware	< 2.18.1	Yes
Hardware	dell	poweredge_fc430	-	No
Operating System	dell	poweredge_m830_firmware	< 2.18.1	Yes
Hardware	dell	poweredge_m830	-	No
Operating System	dell	poweredge_fc830_firmware	< 2.18.1	Yes
Hardware	dell	poweredge_fc830	-	No
Operating System	dell	poweredge_t630_firmware	< 2.18.2	Yes
Hardware	dell	poweredge_t630	-	No
Operating System	dell	poweredge_r530_firmware	< 2.18.2	Yes
Hardware	dell	poweredge_r530	-	No
Operating System	dell	poweredge_r430_firmware	< 2.18.2	Yes
Hardware	dell	poweredge_r430	-	No
Operating System	dell	poweredge_t430_firmware	< 2.18.2	Yes
Hardware	dell	poweredge_t430	-	No
Operating System	dell	poweredge_c6320_firmware	< 2.18.2	Yes
Hardware	dell	poweredge_c6320	-	No
Operating System	dell	poweredge_t130_firmware	< 2.19.1	Yes
Hardware	dell	poweredge_t130	-	No
Operating System	dell	poweredge_r230_firmware	< 2.19.1	Yes
Hardware	dell	poweredge_r230	-	No
Operating System	dell	poweredge_t330_firmware	< 2.19.1	Yes
Hardware	dell	poweredge_t330	-	No
Operating System	dell	poweredge_r330_firmware	< 2.19.1	Yes
Hardware	dell	poweredge_r330	-	No
Operating System	dell	poweredge_r830_firmware	< 1.18.1	Yes
Hardware	dell	poweredge_r830	-	No
Operating System	dell	poweredge_m640_\(pe_vrtx\)_firmware	< 2.20.1	Yes
Hardware	dell	poweredge_m640_\(pe_vrtx\)	-	No
Operating System	dell	poweredge_m630_\(pe_vrtx\)_firmware	< 2.18.1	Yes
Hardware	dell	poweredge_m630_\(pe_vrtx\)	-	No
Operating System	dell	poweredge_m830_\(pe_vrtx\)_firmware	< 2.18.1	Yes
Hardware	dell	poweredge_m830_\(pe_vrtx\)	-	No
Operating System	dell	dss_8440_firmware	< 2.20.0	Yes
Hardware	dell	dss_8440	-	No
Operating System	dell	nx3230_firmware	< 2.18.1	Yes
Hardware	dell	nx3230	-	No
Operating System	dell	nx3330_firmware	< 2.18.1	Yes
Hardware	dell	nx3330	-	No
Operating System	dell	nx430_firmware	< 2.19.1	Yes
Hardware	dell	nx430	-	No
Operating System	dell	emc_storage_nx3240_firmware	< 2.20.1	Yes
Hardware	dell	emc_storage_nx3240	-	No
Operating System	dell	emc_storage_nx3340_firmware	< 2.20.1	Yes
Hardware	dell	emc_storage_nx3340	-	No
Operating System	dell	emc_nx440_firmware	< 2.15.1	Yes
Hardware	dell	nx440	-	No
Operating System	dell	emc_xc_core_xc450_firmware	< 1.12.1	Yes
Hardware	dell	emc_xc_core_xc450	-	No
Operating System	dell	emc_xc_core_xc650_firmware	< 1.12.1	Yes
Hardware	dell	emc_xc_core_xc650	-	No
Operating System	dell	emc_xc_core_xc750_firmware	< 1.12.1	Yes
Hardware	dell	emc_xc_core_xc750	-	No
Operating System	dell	emc_xc_core_xc750xa_firmware	< 1.12.1	Yes
Hardware	dell	emc_xc_core_xc750xa	-	No
Operating System	dell	emc_xc_core_xc6520_firmware	< 1.12.1	Yes
Hardware	dell	emc_xc_core_xc6520	-	No
Operating System	dell	emc_xc_core_xcxr2_firmware	< 2.20.1	Yes
Hardware	dell	emc_xc_core_xcxr2	-	No
Operating System	dell	emc_xc_core_xc740xd2_firmware	< 2.20.1	Yes
Hardware	dell	emc_xc_core_xc740xd2	-	No
Operating System	dell	emc_xc_core_xc7525_firmware	< 2.13.3	Yes
Hardware	dell	emc_xc_core_xc7525	-	No
Operating System	dell	emc_xc_core_6420_firmware	< 2.20.1	Yes
Hardware	dell	emc_xc_core_6420	-	No
Operating System	dell	emc_xc_core_xc640_firmware	< 2.20.1	Yes
Hardware	dell	emc_xc_core_xc640	-	No
Operating System	dell	emc_xc_core_xc740xd_firmware	< 2.20.1	Yes
Hardware	dell	emc_xc_core_xc740xd	-	No
Operating System	dell	emc_xc_core_xc940_firmware	< 2.20.1	Yes
Hardware	dell	emc_xc_core_xc940	-	No
Operating System	dell	xc_core_xc660_firmware	< 1.6.6	Yes
Hardware	dell	xc_core_xc660	-	No
Operating System	dell	xc_core_xc760_firmware	< 1.6.6	Yes
Hardware	dell	xc_core_xc760	-	No
Operating System	dell	xc6320_hyperconverged_appliance_firmware	< 2.18.2	Yes
Hardware	dell	xc6320_hyperconverged_appliance	-	No
Operating System	dell	xc430_hyperconverged_appliance_firmware	< 2.18.2	Yes
Hardware	dell	xc430_hyperconverged_appliance	-	No
Operating System	dell	xc630_hyperconverged_appliance_firmware	< 2.18.1	Yes
Hardware	dell	xc630_hyperconverged_appliance	-	No
Operating System	dell	xc730_hyperconverged_appliance_firmware	< 2.18.1	Yes
Hardware	dell	xc730_hyperconverged_appliance	-	No
Operating System	dell	xc730xd_hyperconverged_appliance_firmware	< 2.18.1	Yes
Hardware	dell	xc730xd_hyperconverged_appliance	-	No

References

https://www.dell.com/support/kbdoc/en-us/000219550/dsa-2023-361-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability Vendor Advisory ([email protected])
https://www.dell.com/support/kbdoc/en-us/000219550/dsa-2023-361-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)