CVE-2024-0172 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.9 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 17%

Affected Products (NVD)

Vendor	Product	Version
dell	poweredge_r660_firmware	𝑥 < 1.5.6
dell	poweredge_r760_firmware	𝑥 < 1.5.6
dell	poweredge_c6620_firmware	𝑥 < 1.5.6
dell	poweredge_mx760c_firmware	𝑥 < 1.5.6
dell	poweredge_r860_firmware	𝑥 < 1.5.6
dell	poweredge_r960_firmware	𝑥 < 1.5.6
dell	poweredge_hs5610_firmware	𝑥 < 1.5.6
dell	poweredge_hs5620_firmware	𝑥 < 1.5.6
dell	poweredge_r660xs_firmware	𝑥 < 1.5.6
dell	poweredge_r760xs_firmware	𝑥 < 1.5.6
dell	poweredge_r760xd2_firmware	𝑥 < 1.5.6
dell	poweredge_t560_firmware	𝑥 < 1.5.6
dell	poweredge_r760xa_firmware	𝑥 < 1.1.3
dell	poweredge_xe9680_firmware	𝑥 < 1.1.3
dell	poweredge_xr5610_firmware	𝑥 < 1.1.4
dell	poweredge_xr8610t_firmware	𝑥 < 1.1.3
dell	poweredge_xr8620t_firmware	𝑥 < 1.1.3
dell	poweredge_xr7620_firmware	𝑥 < 1.5.6
dell	poweredge_xe8640_firmware	𝑥 < 1.2.5
dell	poweredge_xe9640_firmware	𝑥 < 1.3.6
dell	poweredge_r6615_firmware	𝑥 < 1.4.6
dell	poweredge_r7615_firmware	𝑥 < 1.4.6
dell	poweredge_r6625_firmware	𝑥 < 1.4.6
dell	poweredge_r7625_firmware	𝑥 < 1.4.6
dell	poweredge_r650_firmware	𝑥 < 1.11.2
dell	poweredge_r750_firmware	𝑥 < 1.11.2
dell	poweredge_r750xa_firmware	𝑥 < 1.11.2
dell	poweredge_c6520_firmware	𝑥 < 1.11.2
dell	poweredge_mx750c_firmware	𝑥 < 1.11.2
dell	poweredge_r550_firmware	𝑥 < 1.11.2
dell	poweredge_r450_firmware	𝑥 < 1.11.2
dell	poweredge_r650xs_firmware	𝑥 < 1.11.2
dell	poweredge_r750xs_firmware	𝑥 < 1.11.2
dell	poweredge_t550_firmware	𝑥 < 1.11.2
dell	poweredge_xr11_firmware	𝑥 < 1.11.2
dell	poweredge_xr12_firmware	𝑥 < 1.11.2
dell	poweredge_t150_firmware	𝑥 < 1.7.3
dell	poweredge_t350_firmware	𝑥 < 1.7.3
dell	poweredge_r250_firmware	𝑥 < 1.7.3
dell	poweredge_r350_firmware	𝑥 < 1.7.3
dell	poweredge_xr4510c_firmware	𝑥 < 1.12.1
dell	poweredge_xr4520c_firmware	𝑥 < 1.12.1
dell	poweredge_r6515_firmware	𝑥 < 2.12.4
dell	poweredge_r6525_firmware	𝑥 < 2.12.4
dell	poweredge_r7515_firmware	𝑥 < 2.12.4
dell	poweredge_r7525_firmware	𝑥 < 2.12.4
dell	poweredge_c6525_firmware	𝑥 < 2.12.4
dell	poweredge_xe8545_firmware	𝑥 < 2.12.4
dell	poweredge_r740_firmware	𝑥 < 2.19.1
dell	poweredge_r740xd_firmware	𝑥 < 2.19.1
dell	poweredge_r640_firmware	𝑥 < 2.19.1
dell	poweredge_r940_firmware	𝑥 < 2.19.1
dell	poweredge_r540_firmware	𝑥 < 2.19.1
dell	poweredge_r440_firmware	𝑥 < 2.19.1
dell	poweredge_t440_firmware	𝑥 < 2.19.1
dell	poweredge_xr2_firmware	𝑥 < 2.19.1
dell	poweredge_r740xd2_firmware	𝑥 < 2.19.1
dell	poweredge_r840_firmware	𝑥 < 2.19.1
dell	poweredge_r940xa_firmware	𝑥 < 2.19.1
dell	poweredge_t640_firmware	𝑥 < 2.19.1
dell	poweredge_c6420_firmware	𝑥 < 2.19.1
dell	poweredge_fc640_firmware	𝑥 < 2.19.1
dell	poweredge_m640_firmware	𝑥 < 2.19.1
dell	poweredge_m640_\(pe_vrtx\)_firmware	𝑥 < 2.19.1
dell	poweredge_mx740c_firmware	𝑥 < 2.19.1
dell	poweredge_mx840c_firmware	𝑥 < 2.19.1
dell	poweredge_c4140_firmware	𝑥 < 2.19.1
dell	dss_8440_firmware	𝑥 < 2.19.0
dell	poweredge_xe2420_firmware	𝑥 < 2.19.0
dell	poweredge_xe7420_firmware	𝑥 < 2.19.0
dell	poweredge_xe7440_firmware	𝑥 < 2.19.0
dell	poweredge_t140_firmware	𝑥 < 2.14.1
dell	poweredge_t340_firmware	𝑥 < 2.14.1
dell	poweredge_r240_firmware	𝑥 < 2.14.1
dell	poweredge_r340_firmware	𝑥 < 2.14.1
dell	poweredge_r6415_firmware	𝑥 < 1.20.0
dell	poweredge_r7415_firmware	𝑥 < 1.20.0
dell	poweredge_r7425_firmware	𝑥 < 1.20.0
dell	emc_storage_nx3240_firmware	𝑥 < 2.19.1
dell	emc_storage_nx3340_firmware	𝑥 < 2.19.1
dell	nx440_firmware	𝑥 < 2.14.1
dell	emc_xc_core_xc450_firmware	𝑥 < 1.11.2
dell	emc_xc_core_xc650_firmware	𝑥 < 1.11.2
dell	emc_xc_core_xc750_firmware	𝑥 < 1.11.2
dell	emc_xc_core_xc750xa_firmware	𝑥 < 1.11.2
dell	emc_xc_core_xc6520_firmware	𝑥 < 1.11.2
dell	emc_xc_core_6420_system_firmware	𝑥 < 2.19.1
dell	emc_xc_core_xc640_system_firmware	𝑥 < 2.19.1
dell	emc_xc_core_xc740xd_system_firmware	𝑥 < 2.19.1
dell	emc_xc_core_xc740xd2_firmware	𝑥 < 2.19.1
dell	emc_xc_core_xc940_system_firmware	𝑥 < 2.19.1
dell	emc_xc_core_xcxr2_firmware	𝑥 < 2.19.1
dell	emc_xc_core_xc7525_firmware	𝑥 < 2.12.4

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
dell	poweredge_r660_firmware	𝑥 < 1.5.6	ADP
dell	poweredge_r760_firmware	𝑥 < 1.5.6	ADP
dell	poweredge_c6620_firmware	𝑥 < 1.5.6	ADP
dell	poweredge_mx760c_firmware	𝑥 < 1.5.6	ADP
dell	poweredge_r860_firmware	𝑥 < 1.5.6	ADP
dell	poweredge_r960_firmware	𝑥 < 1.5.6	ADP
dell	poweredge_hs5610_firmware	𝑥 < 1.5.6	ADP
dell	poweredge_hs5620_firmware	𝑥 < 1.5.6	ADP
dell	poweredge_r660xs_firmware	𝑥 < 1.5.6	ADP
dell	poweredge_r760xs_firmware	𝑥 < 1.5.6	ADP
dell	poweredge_r760xd2_firmware	𝑥 < 1.5.6	ADP
dell	poweredge_t560_firmware	𝑥 < 1.5.6	ADP
dell	poweredge_r760xa_firmware	𝑥 < 1.1.3	ADP
dell	poweredge_xe9680_firmware	𝑥 < 1.1.3	ADP
dell	poweredge_xr5610_firmware	𝑥 < 1.1.4	ADP
dell	poweredge_xr8620t_firmware	𝑥 < 1.1.3	ADP
dell	poweredge_xr7620_firmware	𝑥 < 1.5.6	ADP
dell	poweredge_xe8640_firmware	𝑥 < 1.2.5	ADP
dell	poweredge_xe9640_firmware	𝑥 < 1.3.6	ADP
dell	poweredge_r6615_firmware	𝑥 < 1.4.6	ADP
dell	poweredge_r7615_firmware	𝑥 < 1.4.6	ADP
dell	poweredge_r6625_firmware	𝑥 < 1.4.6	ADP
dell	poweredge_r7625_firmware	𝑥 < 1.4.6	ADP
dell	poweredge_r650_firmware	𝑥 < 1.11.2	ADP
dell	poweredge_r750_firmware	𝑥 < 1.11.2	ADP
dell	poweredge_r750xa_firmware	𝑥 < 1.11.2	ADP
dell	poweredge_c6520_firmware	𝑥 < 1.11.2	ADP
dell	poweredge_mx750c_firmware	𝑥 < 1.11.2	ADP
dell	poweredge_r550_firmware	𝑥 < 1.11.2	ADP
dell	poweredge_r450_firmware	𝑥 < 1.11.2	ADP
dell	poweredge_r650xs_firmware	𝑥 < 1.11.2	ADP
dell	poweredge_r750xs_firmware	𝑥 < 1.11.2	ADP
dell	poweredge_t550_firmware	𝑥 < 1.11.2	ADP
dell	poweredge_xr11_firmware	𝑥 < 1.11.2	ADP
dell	poweredge_xr12_firmware	𝑥 < 1.11.2	ADP
dell	poweredge_t150_firmware	𝑥 < 1.7.3	ADP
dell	poweredge_t350_firmware	𝑥 < 1.7.3	ADP
dell	poweredge_r250_firmware	𝑥 < 1.7.3	ADP
dell	poweredge_r350_firmware	𝑥 < 1.7.3	ADP
dell	poweredge_xr4510c_firmware	𝑥 < 1.12.1	ADP
dell	poweredge_xr4520c_firmware	𝑥 < 1.12.1	ADP
dell	poweredge_r6515_firmware	𝑥 < 2.12.4	ADP
dell	poweredge_r6525_firmware	𝑥 < 2.12.4	ADP
dell	poweredge_r7515_firmware	𝑥 < 2.12.4	ADP
dell	poweredge_r7525_firmware	𝑥 < 2.12.4	ADP
dell	poweredge_c6525_firmware	𝑥 < 2.12.4	ADP
dell	poweredge_xe8545_firmware	𝑥 < 2.12.4	ADP
dell	poweredge_r740_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_r740xd_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_r640_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_r940_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_r540_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_r440_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_t440_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_xr2_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_r740xd2_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_r840_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_r940xa_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_t640_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_c6420_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_fc640_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_m640_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_mx740c_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_mx840c_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_c4140_firmware	𝑥 < 2.19.1	ADP
dell	poweredge_xe2420_firmware	𝑥 < 2.19.0	ADP
dell	poweredge_xe7420_firmware	𝑥 < 2.19.0	ADP
dell	poweredge_xe7440_firmware	𝑥 < 2.19.0	ADP
dell	poweredge_t140_firmware	𝑥 < 2.14.1	ADP
dell	poweredge_t340_firmware	𝑥 < 2.14.1	ADP
dell	poweredge_r240_firmware	𝑥 < 2.14.1	ADP
dell	poweredge_r340_firmware	𝑥 < 2.14.1	ADP
dell	poweredge_r6415_firmware	𝑥 < 1.20.0	ADP
dell	poweredge_r7415_firmware	𝑥 < 1.20.0	ADP
dell	poweredge_r7425_firmware	𝑥 < 1.20.0	ADP
dell	emc_storage_nx3240_firmware	𝑥 < 2.19.1	ADP
dell	emc_storage_nx3340_firmware	𝑥 < 2.19.1	ADP
dell	emc_xc_core_xc450_firmware	𝑥 < 1.11.2	ADP
dell	emc_xc_core_xc650_firmware	𝑥 < 1.11.2	ADP
dell	emc_xc_core_xc750_firmware	𝑥 < 1.11.2	ADP

Common Weakness Enumeration

CWE-269 - Improper Privilege Management
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References

https://www.dell.com/support/kbdoc/en-us/000223727/dsa-2024-035-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability