Main Vulnerability Database SB2024080132

SB2024080132 - Permissions, privileges, and access controls in Dell PowerEdge Server BIOS and Dell Precision Rack BIOS

Published: August 1, 2024

Security Bulletin ID SB2024080132

Severity

Medium

Patch available

YES

Number of vulnerabilities 1

Exploitation vector Local access

Highest impact

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 1 security vulnerability.

1) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2024-0172)

The vulnerability allows a local user to gain elevated privileges.

The vulnerability exists due to this vulnerability, leading. An authenticated local user could potentially exploit this vulnerability, leading to privilege escalation.

Remediation

Install update from vendor's website.

References

https://www.dell.com/support/kbdoc/en-us/000223727/dsa-2024-035-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability