Skip to main content

Poweredge R660 Firmware CVE-2024-0163

MEDIUM
Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
2024-03-13 security_alert@emc.com
Authentication Bypass Dell Poweredge R660 Firmware Poweredge R760 Firmware Poweredge C6620 Firmware Poweredge Mx760C Firmware Poweredge R860 Firmware Poweredge R960 Firmware Poweredge Hs5610 Firmware Poweredge Hs5620 Firmware Poweredge R660Xs Firmware Poweredge R760Xs Firmware Poweredge R760Xd2 Firmware Poweredge T560 Firmware Poweredge R760Xa Firmware Poweredge Xe9680 Firmware Poweredge Xr5610 Firmware Poweredge Xr8610T Firmware Poweredge Xr8620T Firmware Poweredge Xr7620 Firmware Poweredge Xe8640 Firmware Poweredge Xe9640 Firmware Poweredge R6615 Firmware Poweredge R7615 Firmware Poweredge R6625 Firmware Poweredge R7625 Firmware Poweredge C6615 Firmware Poweredge R650 Firmware Poweredge R750 Firmware Poweredge R750Xa Firmware Poweredge C6520 Firmware Poweredge Mx750C Firmware Poweredge R550 Firmware Poweredge R450 Firmware Poweredge R650Xs Firmware Poweredge R750Xs Firmware Poweredge T550 Firmware Poweredge Xr11 Firmware Poweredge Xr12 Firmware Poweredge T150 Firmware Poweredge T350 Firmware Poweredge R250 Firmware Poweredge R350 Firmware Poweredge Xr4510C Firmware Poweredge Xr4520C Firmware Poweredge R6515 Firmware Poweredge R6525 Firmware Poweredge R7515 Firmware Poweredge R7525 Firmware Poweredge C6525 Firmware Poweredge Xe8545 Firmware Xc Core Xc660 Firmware Xc Core Xc760 Firmware Xc Core Xc7625 Firmware Emc Xc Core Xc450 Firmware Emc Xc Core Xc650 Firmware Emc Xc Core Xc750 Firmware Emc Xc Core Xc750Xa Firmware Emc Xc Core Xc6520 Firmware Emc Xc Core Xc7525 Firmware
6.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.3 MEDIUM
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Mar 13, 2024 - 17:15 nvd
MEDIUM 6.3

DescriptionNVD

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.

AnalysisAI

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. Rated medium severity (CVSS 6.3). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-367. Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources. Affected products include: Dell Poweredge R660 Firmware, Dell Poweredge R760 Firmware, Dell Poweredge C6620 Firmware, Dell Poweredge Mx760C Firmware, Dell Poweredge R860 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Poweredge R660 Firmware

View all
CVE-2024-0162 HIGH
8.8 Mar 13

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulner
CVE-2024-0172 HIGH
7.8 Apr 03

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability.
CVE-2023-32460 HIGH
7.8 Dec 08

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. Rated high severity (CVSS 7.8), th
CVE-2023-44298 MEDIUM
6.8 Dec 05

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vu
CVE-2023-44297 MEDIUM
6.8 Dec 05

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vu
CVE-2023-32461 MEDIUM
6.7 Sep 15

Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. Rated medium severity (CVSS 6.7), t
CVE-2025-26482 MEDIUM
4.9 Sep 25

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. Rated medium
CVE-2024-0173 LOW
3.3 Mar 13

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. Rate
CVE-2024-0154 LOW
3.3 Mar 13

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability. Rate

Same weakness CWE-367 – Time-of-check Time-of-use (TOCTOU) Race Condition

View all
CVE-2024-30088 HIGH POC
7.0
CVE-2025-22224 CRITICAL
9.3
CVE-2022-48618 HIGH
7.0
CVE-2023-38146 HIGH POC
8.8
CVE-2025-34027 CRITICAL POC
10.0
CVE-2020-1337 HIGH POC
7.8
CVE-2026-25641 CRITICAL POC
10.0
CVE-2024-28718 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2024-0163 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy