Improper Privilege Management in Dell PowerEdge BIOS
CVE-2023-32460

8.8HIGH

Key Information:

Vendor

Dell
Status
PowerEdge Platform
Vendor
CVE Published:
8 December 2023

What is CVE-2023-32460?

The Dell PowerEdge BIOS has been found to contain an improper privilege management vulnerability. This security flaw allows an unauthenticated local attacker to exploit the system, potentially enabling them to escalate privileges and gain unauthorized access to sensitive operations. It is crucial for users of Dell PowerEdge servers to remain vigilant and apply the necessary security updates to mitigate this exposure.

Affected Version(s)

PowerEdge Platform BIOS Versions prior to 1.6.6

PowerEdge Platform BIOS Versions prior to 1.3.6

PowerEdge Platform BIOS Versions prior to 1.1.2

References

https://www.dell.com/support/kbdoc/en-us/000219550/dsa-20...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.