6.7

CVE-2023-32461

Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability.  A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges.  

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Poweredge R660 Firmware Version < 1.5.6
   Dell ≫ Poweredge R660 Version-
Dell ≫ Poweredge R760 Firmware Version < 1.5.6
   Dell ≫ Poweredge R760 Version-
Dell ≫ Poweredge C6620 Firmware Version < 1.5.6
   Dell ≫ Poweredge C6620 Version-
Dell ≫ Poweredge Mx760c Firmware Version < 1.5.6
   Dell ≫ Poweredge Mx760c Version-
Dell ≫ Poweredge R860 Firmware Version < 1.5.6
   Dell ≫ Poweredge R860 Version-
Dell ≫ Poweredge R960 Firmware Version < 1.5.6
   Dell ≫ Poweredge R960 Version-
Dell ≫ Poweredge Hs5610 Firmware Version < 1.5.6
   Dell ≫ Poweredge Hs5610 Version-
Dell ≫ Poweredge Hs5620 Firmware Version < 1.5.6
   Dell ≫ Poweredge Hs5620 Version-
Dell ≫ Poweredge R660xs Firmware Version < 1.5.6
   Dell ≫ Poweredge R660xs Version-
Dell ≫ Poweredge R760xs Firmware Version < 1.5.6
   Dell ≫ Poweredge R760xs Version-
Dell ≫ Poweredge R760xd2 Firmware Version < 1.5.6
   Dell ≫ Poweredge R760xd2 Version-
Dell ≫ Poweredge T560 Firmware Version < 1.5.6
   Dell ≫ Poweredge T560 Version-
Dell ≫ Poweredge R760xa Firmware Version < 1.1.3
   Dell ≫ Poweredge R760xa Version-
Dell ≫ Poweredge Xe9680 Firmware Version < 1.1.3
   Dell ≫ Poweredge Xe9680 Version-
Dell ≫ Poweredge Xr5610 Firmware Version < 1.1.4
   Dell ≫ Poweredge Xr5610 Version-
Dell ≫ Poweredge Xr8620t Firmware Version < 1.1.3
   Dell ≫ Poweredge Xr8620t Version-
Dell ≫ Poweredge Xr7620 Firmware Version < 1.5.6
   Dell ≫ Poweredge Xr7620 Version-
Dell ≫ Poweredge Xe8640 Firmware Version < 1.2.5
   Dell ≫ Poweredge Xe8640 Version-
Dell ≫ Poweredge R6615 Firmware Version < 1.3.11
   Dell ≫ Poweredge R6615 Version-
Dell ≫ Poweredge R7615 Firmware Version < 1.3.11
   Dell ≫ Poweredge R7615 Version-
Dell ≫ Poweredge R6625 Firmware Version < 1.3.11
   Dell ≫ Poweredge R6625 Version-
Dell ≫ Poweredge R7625 Firmware Version < 1.3.11
   Dell ≫ Poweredge R7625 Version-
Dell ≫ Poweredge R650 Firmware Version < 1.10.2
   Dell ≫ Poweredge R650 Version-
Dell ≫ Poweredge R750 Firmware Version < 1.10.2
   Dell ≫ Poweredge R750 Version-
Dell ≫ Poweredge R750xa Firmware Version < 1.10.2
   Dell ≫ Poweredge R750xa Version-
Dell ≫ Poweredge C6520 Firmware Version < 1.10.2
   Dell ≫ Poweredge C6520 Version-
Dell ≫ Poweredge Mx750c Firmware Version < 1.10.2
   Dell ≫ Poweredge Mx750c Version-
Dell ≫ Poweredge R550 Firmware Version < 1.10.2
   Dell ≫ Poweredge R550 Version-
Dell ≫ Poweredge R450 Firmware Version < 1.10.2
   Dell ≫ Poweredge R450 Version-
Dell ≫ Poweredge R650xs Firmware Version < 1.10.2
   Dell ≫ Poweredge R650xs Version-
Dell ≫ Poweredge R750xs Firmware Version < 1.10.2
   Dell ≫ Poweredge R750xs Version-
Dell ≫ Poweredge T550 Firmware Version < 1.10.2
   Dell ≫ Poweredge T550 Version-
Dell ≫ Poweredge Xr11 Firmware Version < 1.10.2
   Dell ≫ Poweredge Xr11 Version-
Dell ≫ Poweredge Xr12 Firmware Version < 1.10.2
   Dell ≫ Poweredge Xr12 Version-
Dell ≫ Poweredge T150 Firmware Version < 1.6.3
   Dell ≫ Poweredge T150 Version-
Dell ≫ Poweredge T350 Firmware Version < 1.6.3
   Dell ≫ Poweredge T350 Version-
Dell ≫ Poweredge R250 Firmware Version < 1.6.3
   Dell ≫ Poweredge R250 Version-
Dell ≫ Poweredge R350 Firmware Version < 1.6.3
   Dell ≫ Poweredge R350 Version-
Dell ≫ Poweredge Xr4510c Firmware Version < 1.10.4
   Dell ≫ Poweredge Xr4510c Version-
Dell ≫ Poweredge Xr4520c Firmware Version < 1.10.4
   Dell ≫ Poweredge Xr4520c Version-
Dell ≫ Poweredge Xr4520c Firmware Version1.10.4
   Dell ≫ Poweredge Xr4520c Version-
Dell ≫ Poweredge R6515 Firmware Version < 2.11.4
   Dell ≫ Poweredge R6515 Version-
Dell ≫ Poweredge R6525 Firmware Version < 2.11.3
   Dell ≫ Poweredge R6525 Version-
Dell ≫ Poweredge R7515 Firmware Version < 2.11.4
   Dell ≫ Poweredge R7515 Version-
Dell ≫ Poweredge R7525 Firmware Version < 2.11.3
   Dell ≫ Poweredge R7525 Version-
Dell ≫ Poweredge C6525 Firmware Version < 2.11.3
   Dell ≫ Poweredge C6525 Version-
Dell ≫ Poweredge Xe8545 Firmware Version < 2.11.3
   Dell ≫ Poweredge Xe8545 Version-
Dell ≫ Emc Xc Core Xc450 Firmware Version < 1.11.2
   Dell ≫ Emc Xc Core Xc450 Version-
Dell ≫ Emc Xc Core Xc650 Firmware Version < 1.11.2
   Dell ≫ Emc Xc Core Xc650 Version-
Dell ≫ Emc Xc Core Xc750 Firmware Version < 1.11.2
   Dell ≫ Emc Xc Core Xc750 Version-
Dell ≫ Emc Xc Core Xc750xa Firmware Version < 1.11.2
   Dell ≫ Emc Xc Core Xc750xa Version-
Dell ≫ Emc Xc Core Xc6520 Firmware Version < 1.11.2
   Dell ≫ Emc Xc Core Xc6520 Version-
Dell ≫ Emc Xc Core Xc7525 Firmware Version < 2.11.3
   Dell ≫ Emc Xc Core Xc7525 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.206
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
security_alert@emc.com 5 0.8 3.7
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().