CVE-2023-32461

Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges.  

Score

CVSS 3.1 6.7 Medium

Status

Modified - security_alert@emc.com

Published

2023-09-15

Last modified

2024-09-25

Weaknesses

CWE-122

Affected products

• Emc Xc Core Xc450 Firmware (Dell)
• Emc Xc Core Xc650 Firmware (Dell)
• Emc Xc Core Xc6520 Firmware (Dell)
• Emc Xc Core Xc750 Firmware (Dell)
• Emc Xc Core Xc750xa Firmware (Dell)
• Emc Xc Core Xc7525 Firmware (Dell)
• Poweredge C6520 Firmware (Dell)
• Poweredge C6525 Firmware (Dell)
• Poweredge C6620 Firmware (Dell)
• Poweredge Hs5610 Firmware (Dell)
• Poweredge Hs5620 Firmware (Dell)
• Poweredge Mx750c Firmware (Dell)
• Poweredge Mx760c Firmware (Dell)
• Poweredge Platform (Dell)
• Poweredge R250 Firmware (Dell)
• Poweredge R350 Firmware (Dell)
• Poweredge R450 Firmware (Dell)
• Poweredge R550 Firmware (Dell)
• Poweredge R650 Firmware (Dell)
• Poweredge R650xs Firmware (Dell)
• Poweredge R6515 Firmware (Dell)
• Poweredge R6525 Firmware (Dell)
• Poweredge R660 Firmware (Dell)
• Poweredge R660xs Firmware (Dell)
• Poweredge R6615 Firmware (Dell)
• Poweredge R6625 Firmware (Dell)
• Poweredge R750 Firmware (Dell)
• Poweredge R750xa Firmware (Dell)
• Poweredge R750xs Firmware (Dell)
• Poweredge R7515 Firmware (Dell)
• Poweredge R7525 Firmware (Dell)
• Poweredge R760 Firmware (Dell)
• Poweredge R760xa Firmware (Dell)
• Poweredge R760xd2 Firmware (Dell)
• Poweredge R760xs Firmware (Dell)
• Poweredge R7615 Firmware (Dell)
• Poweredge R7625 Firmware (Dell)
• Poweredge R860 Firmware (Dell)
• Poweredge R960 Firmware (Dell)
• Poweredge T150 Firmware (Dell)
• Poweredge T350 Firmware (Dell)
• Poweredge T550 Firmware (Dell)
• Poweredge T560 Firmware (Dell)
• Poweredge Xe8545 Firmware (Dell)
• Poweredge Xe8640 Firmware (Dell)
• Poweredge Xe9680 Firmware (Dell)
• Poweredge Xr11 Firmware (Dell)
• Poweredge Xr12 Firmware (Dell)
• Poweredge Xr4510c Firmware (Dell)
• Poweredge Xr4520c Firmware (Dell)
• Poweredge Xr5610 Firmware (Dell)
• Poweredge Xr7620 Firmware (Dell)
• Poweredge Xr8620t Firmware (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000216543/dsa-2023-292-security-update-for-dell-poweredge-server-bios-vulnerab…