2 lines
5.2 KiB
JSON
2 lines
5.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PowerEdge Platform","vendor":"Dell","versions":[{"lessThan":"1.8.3","status":"affected","version":"N/A","versionType":"semver"},{"lessThan":"1.3.3","status":"affected","version":"N/A","versionType":"semver"}]}],"source":"security_alert@emc.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dell:poweredge_r6615_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8E330219-A0B2-4C66-B4BE-07CB5D21B819","versionEndExcluding":"1.8.3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dell:poweredge_r6615:-:*:*:*:*:*:*:*","matchCriteriaId":"73077527-E12D-495C-AB91-C35109AE4C43","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dell:poweredge_r7615_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"304F6677-C563-402A-B0F1-2BBBBAF2E183","versionEndExcluding":"1.8.3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dell:poweredge_r7615:-:*:*:*:*:*:*:*","matchCriteriaId":"A74500E4-ADD2-4134-8D60-F4285C158F93","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dell:poweredge_r6625_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"40AB1808-81AA-460E-B6E7-FD54BB5735ED","versionEndExcluding":"1.8.3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dell:poweredge_r6625:-:*:*:*:*:*:*:*","matchCriteriaId":"09981777-C86C-4BC6-8834-97E8A2551897","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dell:poweredge_r7625_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"C7FE22FE-2AB9-4879-B0F5-F20E684ED024","versionEndExcluding":"1.8.3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dell:poweredge_r7625:-:*:*:*:*:*:*:*","matchCriteriaId":"2F074158-252A-4C51-B80C-1B94E22A364A","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dell:poweredge_c6615_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"AFAABA0C-5DD7-4928-9A91-A560366F3054","versionEndExcluding":"1.3.3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dell:poweredge_c6615:-:*:*:*:*:*:*:*","matchCriteriaId":"788C678A-92CF-45BD-99D5-AF18394C9860","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dell:xc_core_xc7625_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"EE5A04A2-5525-4286-BB76-9FCA7BB1F58A","versionEndExcluding":"1.8.3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dell:xc_core_xc7625:-:*:*:*:*:*:*:*","matchCriteriaId":"575F1C0C-37A7-45CF-86B1-7F56E14D211C","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources."},{"lang":"es","value":"Dell PowerEdge Server BIOS contiene una vulnerabilidad de condición de ejecución TOCTOU. Un atacante local con pocos privilegios podría explotar esta vulnerabilidad para obtener acceso a recursos que de otro modo no estarían autorizados."}],"id":"CVE-2024-0171","lastModified":"2026-06-17T06:52:55.850","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":1.1,"impactScore":3.7,"source":"security_alert@emc.com","type":"Secondary"},{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":1.1,"impactScore":3.7,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0171","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-06-25T19:45:39.986656Z","version":"2.0.3"}}]},"published":"2024-06-25T16:15:24.197","references":[{"source":"security_alert@emc.com","tags":["Vendor Advisory"],"url":"https://www.dell.com/support/kbdoc/en-us/000226253/dsa-2024-039-security-update-for-dell-amd-based-poweredge-server-vulnerability"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.dell.com/support/kbdoc/en-us/000226253/dsa-2024-039-security-update-for-dell-amd-based-poweredge-server-vulnerability"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-367"}],"source":"security_alert@emc.com","type":"Secondary"}]}
|