Dell PowerEdge Server BIOS Privilege Escalation Vulnerability

CVE-2024-0172

What is CVE-2024-0172?

The Dell PowerEdge Server BIOS and the Dell Precision Rack BIOS are impacted by a vulnerability that arises from improper privilege management. This issue permits an unauthenticated local attacker to potentially exploit the BIOS, resulting in privilege escalation. If successfully exploited, the attacker may gain unauthorized access to system resources and potentially compromise the integrity of the system. It is crucial for users and administrators to apply the recommended security updates provided by Dell to mitigate these risks.

References