Lucene search
DellCVELIST:CVE-2024-0171HistoryJun 25, 2024 - 3:30 p.m.
CVE-2024-0171
2024-06-2515:30:42
CWE-367
dell
www.cve.org
2
vulnerability
toctou
dell poweredge
bios
exploit
unauthorized access
5.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
0.0004 Low
EPSS
Percentile
9.1%
Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "PowerEdge Platform",
"vendor": "Dell",
"versions": [
{
"lessThan": "1.8.3",
"status": "affected",
"version": "N/A",
"versionType": "semver"
},
{
"lessThan": "1.3.3",
"status": "affected",
"version": "N/A",
"versionType": "semver"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-0171
2024-06-25 15:30:42
cve
cve
CVE-2024-0171
2024-06-25 16:15:24
nvd
nvd
CVE-2024-0171
2024-06-25 16:15:24
5.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
0.0004 Low
EPSS
Percentile
9.1%
Related for CVELIST:CVE-2024-0171