> CVE-2024-0163 [MEDIUM]

« BACK_TO_HOME
PUBLISHED
2024-03-13 17:15
MODIFIED
2025-01-31 16:13
CVSS_SCORE V3
5.3
EPSS (Prob. Exploit)
0.11%
Top 98.5%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08

> DESCRIPTION

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.

> AFFECTED_PRODUCTS

Dell - Poweredge R6515 Firmware
< 2.14.1
Dell - Poweredge R7515 Firmware
< 2.14.1
Dell - Poweredge R6525 Firmware
< 2.14.1
Dell - Poweredge R7525 Firmware
< 2.14.1
Dell - Poweredge C6525 Firmware
< 2.14.1
Dell - Poweredge R660 Firmware
< 2.0.0
Dell - Poweredge R760 Firmware
< 2.0.0
Dell - Poweredge C6620 Firmware
< 2.0.0
Dell - Poweredge Mx760c Firmware
< 2.0.0
Dell - Poweredge R860 Firmware
< 1.8.0
Dell - Poweredge R960 Firmware
< 1.8.0
Dell - Poweredge Hs5610 Firmware
< 2.0.0
Dell - Poweredge Hs5620 Firmware
< 2.0.0
Dell - Poweredge R660xs Firmware
< 2.0.0
Dell - Poweredge R760xs Firmware
< 2.0.0
Dell - Poweredge R760xd2 Firmware
< 2.0.0
Dell - Poweredge T560 Firmware
< 2.0.0
Dell - Poweredge R760xa Firmware
< 2.0.0
Dell - Poweredge Xe9680 Firmware
< 1.8.0
Dell - Poweredge Xr5610 Firmware
< 1.8.0
Dell - Poweredge Xr8620t Firmware
< 1.8.0
Dell - Poweredge Xr7620 Firmware
< 1.8.0
Dell - Poweredge Xe8640 Firmware
< 1.8.0
Dell - Poweredge R6615 Firmware
< 1.7.2
Dell - Poweredge R7615 Firmware
< 1.7.2
Dell - Poweredge R6625 Firmware
< 1.7.2
Dell - Poweredge R7625 Firmware
< 1.7.2
Dell - Poweredge R650 Firmware
< 1.13.2
Dell - Poweredge R750 Firmware
< 1.13.2
Dell - Poweredge R750xa Firmware
< 1.13.2
Dell - Poweredge C6520 Firmware
< 1.13.2
Dell - Poweredge Mx750c Firmware
< 1.13.2
Dell - Poweredge R550 Firmware
< 1.13.2
Dell - Poweredge R450 Firmware
< 1.13.2
Dell - Poweredge R650xs Firmware
< 1.13.2
Dell - Poweredge R750xs Firmware
< 1.13.2
Dell - Poweredge T550 Firmware
< 1.13.2
Dell - Poweredge Xr11 Firmware
< 1.13.2
Dell - Poweredge Xr12 Firmware
< 1.13.2
Dell - Poweredge T150 Firmware
< 1.9.1
Dell - Poweredge T350 Firmware
< 1.9.1
Dell - Poweredge R250 Firmware
< 1.9.1
Dell - Poweredge R350 Firmware
< 1.9.1
Dell - Poweredge Xr4510c Firmware
< 1.14.1
Dell - Poweredge Xr4520c Firmware
< 1.14.1
Dell - Poweredge Xe8545 Firmware
< 2.14.1
Dell - Emc Xc Core Xc450 Firmware
< 1.13.2
Dell - Emc Xc Core Xc650 Firmware
< 1.13.2
Dell - Emc Xc Core Xc750 Firmware
< 1.13.2
Dell - Emc Xc Core Xc750xa Firmware
< 1.13.2
Dell - Emc Xc Core Xc6520 Firmware
< 1.13.2
Dell - Emc Xc Core Xc7525 Firmware
< 2.14.1
Dell - Poweredge Xr8610t Firmware
< 1.8.0
Dell - Poweredge Xe9640 Firmware
< 1.8.0
Dell - Poweredge C6615 Firmware
< 1.2.3
Dell - Xc Core Xc660 Firmware
< 2.0.0
Dell - Xc Core Xc760 Firmware
< 2.0.0
Dell - Xc Core Xc7625 Firmware
< 1.7.2

> CVSS V3 METRICS

CVSS_VECTOR
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

> MÉTRIQUES CVSS DÉTAILLÉES

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Métrique Valeur Interprétation
AV (Vecteur d'Attaque)
Attack Vector
Local (L)
Exploit nécessite un accès local au système
AC (Complexité d'Attaque)
Attack Complexity
High (H)
Conditions spécifiques doivent être réunies pour exploiter
PR (Privilèges Requis)
Privileges Required
Low (L)
Authentifié avec compte utilisateur basique
UI (Interaction Utilisateur)
User Interaction
None (N)
Aucune interaction utilisateur nécessaire
S (Périmètre)
Scope
Changed (C)
Impact s'étend au-delà du composant compromis
C (Impact Confidentialité)
Confidentiality Impact
Low (L)
Divulgation limitée d'informations
I (Impact Intégrité)
Integrity Impact
Low (L)
Modification limitée des données possible
A (Impact Disponibilité)
Availability Impact
Low (L)
Interruption partielle du service possible

> RÉSUMÉ DES IMPACTS

Confidentialité
Low
Divulgation limitée d'informations
Intégrité
Low
Modification limitée des données possible
Disponibilité
Low
Interruption partielle du service possible

> HISTORIQUE DES MODIFICATIONS

Première apparition
13/03/2024 17:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 14:48
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME