DSA-2023-287: Security Update for a Dell Precision Rack BIOS Vulnerability
Summary: Dell Precision Rack BIOS remediation is available for a buffer overflow vulnerability that could be exploited by malicious users to compromise the affected system.
Acest articol se aplică pentru
Acest articol nu se aplică pentru
Acest articol nu este legat de un produs specific.
Acest articol nu acoperă toate versiunile de produs existente.
Impact
Medium
Details
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-32461 | Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges. | 5.0 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-32461 | Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges. | 5.0 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L |
Produse afectate și măsuri de remediere
| Product | Software/Firmware | Affected Versions | Remediated Versions | BIOS Release Date | Link |
|---|---|---|---|---|---|
| Precision 7960 Rack | BIOS | Versions prior to 1.4.4 | Version 1.4.4 or later | 07/25/2023 | Go to the Drivers & Downloads site for updates. |
| Precision 7960 XL Rack | BIOS | Versions prior to 1.4.4 | Version 1.4.4 or later | 07/25/2023 | Go to the Drivers & Downloads site for updates. |
| Product | Software/Firmware | Affected Versions | Remediated Versions | BIOS Release Date | Link |
|---|---|---|---|---|---|
| Precision 7960 Rack | BIOS | Versions prior to 1.4.4 | Version 1.4.4 or later | 07/25/2023 | Go to the Drivers & Downloads site for updates. |
| Precision 7960 XL Rack | BIOS | Versions prior to 1.4.4 | Version 1.4.4 or later | 07/25/2023 | Go to the Drivers & Downloads site for updates. |
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-09-14 | Initial Release |
Related Information
Exonerare de răspundere
Produse afectate
Precision 7960 XL Rack, Precision 7960 RackProprietăți articol
Article Number: 000216420
Article Type: Dell Security Advisory
Ultima modificare: 14 Sep 2023
Găsiți răspunsuri la întrebările dvs. de la alți utilizatori Dell
Servicii de asistență
Verificați dacă dispozitivul dvs. este acoperit de serviciile de asistență.