Ga naar hoofdinhoud

DSA-2023-343: Security Update for a Dell Precision Rack BIOS Vulnerability

Samenvatting: Dell Precision Rack BIOS remediation is available for an improper privilege management vulnerability that could be exploited by malicious users to compromise the affected system.

Dit artikel is van toepassing op Dit artikel is niet van toepassing op Dit artikel is niet gebonden aan een specifiek product. Niet alle productversies worden in dit artikel vermeld.

Impact

High

Gegevens

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2023-32460 Dell PowerEdge BIOS and Dell Precision BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation. 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2023-32460 Dell PowerEdge BIOS and Dell Precision BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation. 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

Product

Software/Firmware

Affected Versions

Remediated Versions

BIOS Release Date

Link

Precision 7910 Rack

BIOS

Versions prior to 2.18.0

Version 2.18.0 or later

12/7/2023

Go to the Drivers & Downloads site for updates.

Precision 7910 XL Rack

BIOS

Versions prior to 2.18.0

Version 2.18.0 or later

12/7/2023

Go to the Drivers & Downloads site for updates.

Precision 7920 Rack

BIOS

Versions prior to 2.20.1

Version 2.20.1 or later

12/22/2023

Go to the Drivers & Downloads site for updates.

7920 XL Rack

BIOS

Versions prior to 2.20.1

Version 2.20.1 or later

12/22/2023

Go to the Drivers & Downloads site for updates.

Precision 7960 Rack

BIOS

Versions prior to 2.0.0

Version BIOS 2.0.0 or later

01/23/2024

Go to the Drivers & Downloads site for updates.

Precision 7960 XL Rack

BIOS

Versions prior to 2.0.0

Version BIOS 2.0.0 or later

01/23/2024

Go to the Drivers & Downloads site for updates.

Product

Software/Firmware

Affected Versions

Remediated Versions

BIOS Release Date

Link

Precision 7910 Rack

BIOS

Versions prior to 2.18.0

Version 2.18.0 or later

12/7/2023

Go to the Drivers & Downloads site for updates.

Precision 7910 XL Rack

BIOS

Versions prior to 2.18.0

Version 2.18.0 or later

12/7/2023

Go to the Drivers & Downloads site for updates.

Precision 7920 Rack

BIOS

Versions prior to 2.20.1

Version 2.20.1 or later

12/22/2023

Go to the Drivers & Downloads site for updates.

7920 XL Rack

BIOS

Versions prior to 2.20.1

Version 2.20.1 or later

12/22/2023

Go to the Drivers & Downloads site for updates.

Precision 7960 Rack

BIOS

Versions prior to 2.0.0

Version BIOS 2.0.0 or later

01/23/2024

Go to the Drivers & Downloads site for updates.

Precision 7960 XL Rack

BIOS

Versions prior to 2.0.0

Version BIOS 2.0.0 or later

01/23/2024

Go to the Drivers & Downloads site for updates.

The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.

Revisiegeschiedenis

RevisionDateDescription
1.02023-12-07Initial Release
2.02024-01-23Updated Affected Products and Remediation section: Final Platform list update
3.02024-01-23Updated for enhanced presentation with no changes to content

Verwante informatie

Getroffen producten

R7910 XL, 7920 XL Rack, Precision 7960 XL Rack, Precision 7920 Rack, Precision Rack 7910, Precision 7960 Rack
Artikeleigenschappen
Artikelnummer: 000217708
Artikeltype: Dell Security Advisory
Laatst aangepast: 23 jan. 2024
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.