Search/CVE-2023-32460
● CVE — High

CVE-2023-32460

VendordellProductpoweredge c6620 firmware, poweredge hs5610 firmware, poweredge hs5620 firmware, poweredge mx760c firmware, poweredge r660 firmware, poweredge r660xs firmware, poweredge r6615 firmware, poweredge r6625 firmware, poweredge r760 firmware, poweredge r760xa firmware, poweredge r760xd2 firmware, poweredge r760xs firmware, poweredge r7615 firmware, poweredge r7625 firmware, poweredge r860 firmware, poweredge r960 firmware, poweredge t560 firmware, poweredge xe8640 firmware, poweredge xe9680 firmware, poweredge xr5610 firmware, poweredge xr7620 firmware, poweredge xr8620t firmware, poweredge c6615 firmware, poweredge xe9640 firmware, poweredge xr8610t firmwareDiscoveredDec 8, 2023UpdatedNov 21, 2024

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

View graph Watch Export
CVSS v3.1
8.8 HIGH
EPSS
0.19%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Dec 8, 2023
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024