Skip to main content

Poweredge R6415 Firmware CVE-2024-0172

HIGH
Improper Privilege Management (CWE-269)
2024-04-03 security_alert@emc.com
Privilege Escalation Dell Poweredge R6415 Firmware Poweredge R7415 Firmware Poweredge R7425 Firmware Poweredge R660 Firmware Poweredge R760 Firmware Poweredge C6620 Firmware Poweredge Mx760C Firmware Poweredge R860 Firmware Poweredge R960 Firmware Poweredge Hs5610 Firmware Poweredge Hs5620 Firmware Poweredge R660Xs Firmware Poweredge R760Xs Firmware Poweredge R760Xd2 Firmware Poweredge T560 Firmware Poweredge R760Xa Firmware Poweredge Xe9680 Firmware Poweredge Xr5610 Firmware Poweredge Xr8610T Firmware Poweredge Xr8620T Firmware Poweredge Xr7620 Firmware Poweredge Xe8640 Firmware Poweredge Xe9640 Firmware Poweredge R650 Firmware Poweredge R750 Firmware Poweredge R750Xa Firmware Poweredge C6520 Firmware Poweredge Mx750C Firmware Poweredge R550 Firmware Poweredge R450 Firmware Poweredge R650Xs Firmware Poweredge R750Xs Firmware Poweredge T550 Firmware Poweredge Xr11 Firmware Poweredge Xr12 Firmware Poweredge Xr4510C Firmware Poweredge Xr4520C Firmware Poweredge T150 Firmware Poweredge T350 Firmware Poweredge R250 Firmware Poweredge R350 Firmware Poweredge R740 Firmware Poweredge R740Xd Firmware Poweredge R640 Firmware Poweredge R940 Firmware Poweredge R540 Firmware Poweredge R440 Firmware Poweredge T440 Firmware Poweredge Xr2 Firmware Poweredge R740Xd2 Firmware Poweredge R840 Firmware Poweredge R940Xa Firmware Poweredge T640 Firmware Poweredge C6420 Firmware Poweredge Fc640 Firmware Poweredge M640 Firmware Poweredge Mx740C Firmware Poweredge Mx840C Firmware Poweredge C4140 Firmware Dss 8440 Firmware Poweredge Xe2420 Firmware Poweredge Xe7420 Firmware Poweredge Xe7440 Firmware Poweredge T140 Firmware Poweredge T340 Firmware Poweredge R240 Firmware Poweredge R340 Firmware Emc Storage Nx3240 Firmware Emc Storage Nx3340 Firmware Emc Xc Core Xc450 Firmware Emc Xc Core Xc650 Firmware Emc Xc Core Xc750 Firmware Emc Xc Core Xc750Xa Firmware Emc Xc Core Xc6520 Firmware Emc Xc Core 6420 System Firmware Emc Xc Core Xc640 System Firmware Emc Xc Core Xc740Xd System Firmware Emc Xc Core Xc740Xd2 Firmware Emc Xc Core Xc940 System Firmware Emc Xc Core Xcxr2 Firmware Poweredge R6615 Firmware Poweredge R7615 Firmware Poweredge R6625 Firmware Poweredge R7625 Firmware Poweredge R6515 Firmware Poweredge R6525 Firmware Poweredge R7515 Firmware Poweredge R7525 Firmware Poweredge C6525 Firmware Poweredge Xe8545 Firmware Emc Xc Core Xc7525 Firmware Nx440 Firmware Poweredge M640 Pe Vrtx Firmware
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Apr 03, 2024 - 10:15 nvd
HIGH 7.8

DescriptionNVD

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

AnalysisAI

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Privilege Management (CWE-269), which allows attackers to escalate privileges to gain unauthorized elevated access. Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation. Affected products include: Dell Poweredge R660 Firmware, Dell Poweredge R760 Firmware, Dell Poweredge C6620 Firmware, Dell Poweredge Mx760C Firmware, Dell Poweredge R860 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply principle of least privilege, validate privilege transitions, implement proper role separation.

More in Poweredge R6415 Firmware

View all
CVE-2023-32460 HIGH
7.8 Dec 08

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. Rated high severity (CVSS 7.8), th
CVE-2021-21557 MEDIUM
6.7 Jun 14

Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. Rate
CVE-2025-26482 MEDIUM
4.9 Sep 25

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. Rated medium
CVE-2025-36581 LOW
3.8 Aug 14

Dell PowerEdge Platform version(s) 14G AMD BIOS v1.25.0 and prior, contain(s) an Access of Memory Location After End of

Same weakness CWE-269 – Improper Privilege Management

View all
CVE-2017-5689 CRITICAL POC
9.8
CVE-2021-20021 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2012-3993 CRITICAL POC
9.3
CVE-2017-11467 CRITICAL POC
9.8
CVE-2014-1510 CRITICAL POC
9.8
CVE-2014-1511 CRITICAL POC
9.8
CVE-2019-1405 HIGH POC
7.8

Same technique Privilege Escalation

View all
CVE-2024-0012 CRITICAL POC
9.3
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2024-9474 MEDIUM POC
6.9
CVE-2017-5689 CRITICAL POC
9.8
CVE-2021-20021 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8

Share

CVE-2024-0172 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy