What is CVE-2024-0172?

CVE-2024-0172 is a high-severity vulnerability in Dell Dss_8440, classified under Improper Privilege Management. CVSS score: 7.9/10. Published 2024-04-03.

How severe is CVE-2024-0172?

High severity. CVSS v3 base score is 7.9 out of 10.

Privilege escalation in Dell Dss_8440

CVE-2024-0172

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

Vulnerability class: Privilege Escalation

EPSS: 0.001 (4.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.9 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L.

Affected products

Dell Dss_8440
Dell Dss_8440_firmware
Dell Emc_storage_nx3240
Dell Emc_storage_nx3240_firmware
Dell Emc_storage_nx3340
Dell Emc_storage_nx3340_firmware
Dell Emc_xc_core_6420_system
Dell Emc_xc_core_6420_system_firmware
Dell Emc_xc_core_xc450
Dell Emc_xc_core_xc450_firmware

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

security_alert@emc.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2024-0172?: CVE-2024-0172 is a high-severity vulnerability in Dell Dss_8440, classified under Improper Privilege Management. CVSS score: 7.9/10. Published 2024-04-03.
How severe is CVE-2024-0172?: High severity. CVSS v3 base score is 7.9 out of 10.