CVE-2023-32461: Buffer Overflow
Published Sep 15, 2023
·Updated
Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges.
Affected Software
105 affected components
Dell Poweredge R660 Firmware<1.5.6
Dell Poweredge R660
Dell Poweredge R760 Firmware<1.5.6
Dell Poweredge R760
Dell Poweredge C6620 Firmware<1.5.6
Dell Poweredge C6620
Dell Poweredge Mx760c Firmware<1.5.6
Dell Poweredge Mx760c
Dell Poweredge R860 Firmware<1.5.6
Dell Poweredge R860
Dell Poweredge R960 Firmware<1.5.6
Dell Poweredge R960
Dell Poweredge Hs5610 Firmware<1.5.6
Dell Poweredge Hs5610
Dell Poweredge Hs5620 Firmware<1.5.6
Dell Poweredge Hs5620
Dell Poweredge R660xs Firmware<1.5.6
Dell Poweredge R660xs
Dell Poweredge R760xs Firmware<1.5.6
Dell Poweredge R760xs
Dell Poweredge R760xd2 Firmware<1.5.6
Dell Poweredge R760xd2
Dell Poweredge T560 Firmware<1.5.6
Dell Poweredge T560
Dell Poweredge R760xa Firmware<1.1.3
Dell Poweredge R760xa
Dell Poweredge Xe9680 Firmware<1.1.3
Dell Poweredge Xe9680
Dell Poweredge Xr5610 Firmware<1.1.4
Dell Poweredge Xr5610
Dell Poweredge Xr8620t Firmware<1.1.3
Dell Poweredge Xr8620t
Dell Poweredge Xr7620 Firmware<1.5.6
Dell Poweredge Xr7620
Dell Poweredge Xe8640 Firmware<1.2.5
Dell Poweredge Xe8640
Dell Poweredge R6615 Firmware<1.3.11
Dell Poweredge R6615
Dell Poweredge R7615 Firmware<1.3.11
Dell Poweredge R7615
Dell Poweredge R6625 Firmware<1.3.11
Dell Poweredge R6625
Dell Poweredge R7625 Firmware<1.3.11
Dell Poweredge R7625
Dell Poweredge R650 Firmware<1.10.2
Dell Poweredge R650
Dell Poweredge R750 Firmware<1.10.2
Dell Poweredge R750
Dell Poweredge R750xa Firmware<1.10.2
Dell Poweredge R750xa
Dell Poweredge C6520 Firmware<1.10.2
Dell Poweredge C6520
Dell Poweredge Mx750c Firmware<1.10.2
Dell Poweredge Mx750c
Dell Poweredge R550 Firmware<1.10.2
Dell Poweredge R550
Dell Poweredge R450 Firmware<1.10.2
Dell Poweredge R450
Dell Poweredge R650xs Firmware<1.10.2
Dell Poweredge R650xs
Dell Poweredge R750xs Firmware<1.10.2
Dell Poweredge R750xs
Dell Poweredge T550 Firmware<1.10.2
Dell Poweredge T550
Dell Poweredge Xr11 Firmware<1.10.2
Dell Poweredge Xr11
Dell Poweredge Xr12 Firmware<1.10.2
Dell Poweredge Xr12
Dell Poweredge T150 Firmware<1.6.3
Dell Poweredge T150
Dell Poweredge T350 Firmware<1.6.3
Dell Poweredge T350
Dell Poweredge R250 Firmware<1.6.3
Dell Poweredge R250
Dell Poweredge R350 Firmware<1.6.3
Dell Poweredge R350
Dell Poweredge Xr4510c Firmware<1.10.4
Dell Poweredge Xr4510c
Dell Poweredge Xr4520c Firmware<1.10.4
Dell Poweredge Xr4520c Firmware=1.10.4
Dell Poweredge Xr4520c
Dell Poweredge R6515 Firmware<2.11.4
Dell Poweredge R6515
Dell Poweredge R6525 Firmware<2.11.3
Dell Poweredge R6525
Dell Poweredge R7515 Firmware<2.11.4
Dell Poweredge R7515
Dell Poweredge R7525 Firmware<2.11.3
Dell Poweredge R7525
Dell Poweredge C6525 Firmware<2.11.3
Dell Poweredge C6525
Dell Poweredge Xe8545 Firmware<2.11.3
Dell Poweredge Xe8545
Dell Emc Xc Core Xc450 Firmware<1.11.2
Dell Emc Xc Core Xc450
Dell Emc Xc Core Xc650 Firmware<1.11.2
Dell Emc Xc Core Xc650
Dell Emc Xc Core Xc750 Firmware<1.11.2
Dell Emc Xc Core Xc750
Dell Emc Xc Core Xc750xa Firmware<1.11.2
Dell Emc Xc Core Xc750xa
Dell Emc Xc Core Xc6520 Firmware<1.11.2
Dell Emc Xc Core Xc6520
Dell Emc Xc Core Xc7525 Firmware<2.11.3
Dell Emc Xc Core Xc7525
Event History
Sep 15, 2023
CVE Published
via MITRE·06:56 AM
Data Sourced
via MITRE·06:56 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-32461?
CVE-2023-32461 is considered a critical vulnerability due to its potential to allow local users to escalate privileges and corrupt memory.
2
How can I fix CVE-2023-32461?
To fix CVE-2023-32461, update the Dell PowerEdge BIOS firmware to the latest version available from Dell's support site.
3
Which Dell PowerEdge models are affected by CVE-2023-32461?
The affected Dell PowerEdge models include R660, R760, C6620, MX760C, R860, R960, and other models listed in the advisory.
4
What type of vulnerability is CVE-2023-32461?
CVE-2023-32461 is a buffer overflow vulnerability that may lead to memory corruption.
5
Can CVE-2023-32461 be exploited remotely?
CVE-2023-32461 requires local access with high privileges to exploit, making remote exploitation unlikely.