CVE-2023-32461: Buffer Overflow

First published: Fri Sep 15 2023(Updated: )

Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges.

Credit: security_alert@emc.com security_alert@emc.com

Affected Software	Affected Version	How to fix
Dell Poweredge R660 Firmware	<1.5.6
Dell Poweredge R660
Dell Poweredge R760 Firmware	<1.5.6
Dell Poweredge R760
Dell Poweredge C6620 Firmware	<1.5.6
Dell Poweredge C6620
Dell Poweredge Mx760c Firmware	<1.5.6
Dell Poweredge Mx760c
Dell Poweredge R860 Firmware	<1.5.6
Dell Poweredge R860
Dell Poweredge R960 Firmware	<1.5.6
Dell Poweredge R960
Dell Poweredge Hs5610 Firmware	<1.5.6
Dell Poweredge Hs5610
Dell Poweredge Hs5620 Firmware	<1.5.6
Dell Poweredge Hs5620
Dell Poweredge R660xs Firmware	<1.5.6
Dell Poweredge R660xs
Dell Poweredge R760xs Firmware	<1.5.6
Dell Poweredge R760xs
Dell Poweredge R760xd2 Firmware	<1.5.6
Dell Poweredge R760xd2
Dell Poweredge T560 Firmware	<1.5.6
Dell Poweredge T560
Dell Poweredge R760xa Firmware	<1.1.3
Dell Poweredge R760xa
Dell Poweredge Xe9680 Firmware	<1.1.3
Dell Poweredge Xe9680
Dell Poweredge Xr5610 Firmware	<1.1.4
Dell Poweredge Xr5610
Dell Poweredge Xr8620t Firmware	<1.1.3
Dell Poweredge Xr8620t
Dell Poweredge Xr7620 Firmware	<1.5.6
Dell Poweredge Xr7620
Dell Poweredge Xe8640 Firmware	<1.2.5
Dell Poweredge Xe8640
Dell Poweredge R6615 Firmware	<1.3.11
Dell Poweredge R6615
Dell Poweredge R7615 Firmware	<1.3.11
Dell Poweredge R7615
Dell Poweredge R6625 Firmware	<1.3.11
Dell Poweredge R6625
Dell Poweredge R7625 Firmware	<1.3.11
Dell Poweredge R7625
Dell Poweredge R650 Firmware	<1.10.2
Dell Poweredge R650
Dell Poweredge R750 Firmware	<1.10.2
Dell Poweredge R750
Dell Poweredge R750xa Firmware	<1.10.2
Dell Poweredge R750xa
Dell Poweredge C6520 Firmware	<1.10.2
Dell Poweredge C6520
Dell Poweredge Mx750c Firmware	<1.10.2
Dell Poweredge Mx750c
Dell Poweredge R550 Firmware	<1.10.2
Dell Poweredge R550
Dell Poweredge R450 Firmware	<1.10.2
Dell Poweredge R450
Dell Poweredge R650xs Firmware	<1.10.2
Dell Poweredge R650xs
Dell Poweredge R750xs Firmware	<1.10.2
Dell Poweredge R750xs
Dell Poweredge T550 Firmware	<1.10.2
Dell Poweredge T550
Dell Poweredge Xr11 Firmware	<1.10.2
Dell Poweredge Xr11
Dell Poweredge Xr12 Firmware	<1.10.2
Dell Poweredge Xr12
Dell Poweredge T150 Firmware	<1.6.3
Dell Poweredge T150
Dell Poweredge T350 Firmware	<1.6.3
Dell Poweredge T350
Dell Poweredge R250 Firmware	<1.6.3
Dell Poweredge R250
Dell Poweredge R350 Firmware	<1.6.3
Dell Poweredge R350
Dell Poweredge Xr4510c Firmware	<1.10.4
Dell Poweredge Xr4510c
Dell Poweredge Xr4520c Firmware	<1.10.4
Dell Poweredge Xr4520c Firmware	=1.10.4
Dell Poweredge Xr4520c
Dell Poweredge R6515 Firmware	<2.11.4
Dell Poweredge R6515
Dell Poweredge R6525 Firmware	<2.11.3
Dell Poweredge R6525
Dell Poweredge R7515 Firmware	<2.11.4
Dell Poweredge R7515
Dell Poweredge R7525 Firmware	<2.11.3
Dell Poweredge R7525
Dell Poweredge C6525 Firmware	<2.11.3
Dell Poweredge C6525
Dell Poweredge Xe8545 Firmware	<2.11.3
Dell Poweredge Xe8545
Dell Emc Xc Core Xc450 Firmware	<1.11.2
Dell Emc Xc Core Xc450
Dell Emc Xc Core Xc650 Firmware	<1.11.2
Dell Emc Xc Core Xc650
Dell Emc Xc Core Xc750 Firmware	<1.11.2
Dell Emc Xc Core Xc750
Dell Emc Xc Core Xc750xa Firmware	<1.11.2
Dell Emc Xc Core Xc750xa
Dell Emc Xc Core Xc6520 Firmware	<1.11.2
Dell Emc Xc Core Xc6520
Dell Emc Xc Core Xc7525 Firmware	<2.11.3
Dell Emc Xc Core Xc7525

Never miss a vulnerability like this again

Reference Links

https://www.dell.com/support/kbdoc/en-us/000216543/dsa-2023-292-security-update-for-dell-poweredge-server-bios-vulnerability

CVE-2023-32461: Buffer Overflow

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact