Skip to main content

Poweredge R660 Firmware CVE-2023-32461

MEDIUM
Heap-based Buffer Overflow (CWE-122)
2023-09-15 security_alert@emc.com
Buffer Overflow Dell Heap Overflow Poweredge R660 Firmware Poweredge R760 Firmware Poweredge C6620 Firmware Poweredge Mx760C Firmware Poweredge R860 Firmware Poweredge R960 Firmware Poweredge Hs5610 Firmware Poweredge Hs5620 Firmware Poweredge R660Xs Firmware Poweredge R760Xs Firmware Poweredge R760Xd2 Firmware Poweredge T560 Firmware Poweredge R760Xa Firmware Poweredge Xe9680 Firmware Poweredge Xr5610 Firmware Poweredge Xr8620T Firmware Poweredge Xr7620 Firmware Poweredge Xe8640 Firmware Poweredge R6615 Firmware Poweredge R7615 Firmware Poweredge R6625 Firmware Poweredge R7625 Firmware Poweredge R650 Firmware Poweredge R750 Firmware Poweredge R750Xa Firmware Poweredge C6520 Firmware Poweredge Mx750C Firmware Poweredge R550 Firmware Poweredge R450 Firmware Poweredge R650Xs Firmware Poweredge R750Xs Firmware Poweredge T550 Firmware Poweredge Xr11 Firmware Poweredge Xr12 Firmware Poweredge T150 Firmware Poweredge T350 Firmware Poweredge R250 Firmware Poweredge R350 Firmware Poweredge Xr4510C Firmware Poweredge Xr4520C Firmware Poweredge R6515 Firmware Poweredge R6525 Firmware Poweredge R7515 Firmware Poweredge R7525 Firmware Poweredge C6525 Firmware Poweredge Xe8545 Firmware Emc Xc Core Xc450 Firmware Emc Xc Core Xc650 Firmware Emc Xc Core Xc750 Firmware Emc Xc Core Xc750Xa Firmware Emc Xc Core Xc6520 Firmware Emc Xc Core Xc7525 Firmware
6.7
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.7 MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Sep 15, 2023 - 07:15 nvd
MEDIUM 6.7

DescriptionNVD

Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges.

AnalysisAI

Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-122. Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges. Affected products include: Dell Poweredge R660 Firmware, Dell Poweredge R760 Firmware, Dell Poweredge C6620 Firmware, Dell Poweredge Mx760C Firmware, Dell Poweredge R860 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Poweredge R660 Firmware

View all
CVE-2024-0162 HIGH
8.8 Mar 13

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulner
CVE-2024-0172 HIGH
7.8 Apr 03

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability.
CVE-2023-32460 HIGH
7.8 Dec 08

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. Rated high severity (CVSS 7.8), th
CVE-2023-44298 MEDIUM
6.8 Dec 05

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vu
CVE-2023-44297 MEDIUM
6.8 Dec 05

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vu
CVE-2024-0163 MEDIUM
6.3 Mar 13

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. Rated medium seve
CVE-2025-26482 MEDIUM
4.9 Sep 25

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. Rated medium
CVE-2024-0173 LOW
3.3 Mar 13

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. Rate
CVE-2024-0154 LOW
3.3 Mar 13

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. Rate

Same weakness CWE-122 – Heap-based Buffer Overflow

View all
CVE-2023-4911 HIGH POC
7.8
CVE-2025-24985 HIGH POC
7.8
CVE-2025-21418 HIGH
7.8
CVE-2025-24993 HIGH
7.8
CVE-2023-6246 HIGH POC
8.4
CVE-2026-42945 CRITICAL POC
9.2
CVE-2014-0781 CRITICAL POC
9.3
CVE-2024-30085 HIGH POC
7.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2017-11882 HIGH POC
7.8
CVE-2010-3333 HIGH POC
7.8

Share

CVE-2023-32461 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy