Search/CVE-2024-0163
● CVE — Medium

CVE-2024-0163

VendordellProductpoweredge c6620 firmware, poweredge hs5610 firmware, poweredge hs5620 firmware, poweredge mx760c firmware, poweredge r660 firmware, poweredge r660xs firmware, poweredge r6615 firmware, poweredge r6625 firmware, poweredge r760 firmware, poweredge r760xa firmware, poweredge r760xd2 firmware, poweredge r760xs firmware, poweredge r7615 firmware, poweredge r7625 firmware, poweredge r860 firmware, poweredge r960 firmware, poweredge t560 firmware, poweredge xe8640 firmware, poweredge xe9680 firmware, poweredge xr5610 firmware, poweredge xr7620 firmware, poweredge xr8620t firmware, poweredge c6615 firmware, poweredge xe9640 firmware, poweredge xr8610t firmwareDiscoveredMar 13, 2024UpdatedJan 31, 2025

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.

View graph Watch Export
CVSS v3.1
5.3 MEDIUM
EPSS
0.11%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityHIGH
Privileges RequiredLOW
User InteractionNONE
ScopeCHANGED
ConfidentialityLOW
IntegrityLOW
AvailabilityLOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Connections
26 relationships
Timeline
disclosure → media coverage
Mar 13, 2024
Disclosure — published as a CVE record. · last revised by NVD Jan 31, 2025