Dell PowerEdge Server BIOS Race Condition Vulnerability Could Lead to Unauthorized Access
CVE-2024-0163

6.3MEDIUM

Key Information:

Vendor

Dell
Status
Poweredge BiOS Intel 16g
Vendor
CVE Published:
13 March 2024

What is CVE-2024-0163?

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.

Affected Version(s)

PowerEdge BIOS Intel 16G < 2.0.0

PowerEdge BIOS Intel 16G < 1.7.6

PowerEdge BIOS Intel 16G < 1.7.2

References

https://www.dell.com/support/kbdoc/en-us/000222756/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.