CVE-2024-0163: Race Condition
Published Mar 13, 2024
·Updated
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.
Affected Software
116 affected components
All of the following
Dell Poweredge R660 Firmware<2.0.0
Dell Poweredge R660
All of the following
Dell Poweredge R760 Firmware<2.0.0
Dell Poweredge R760
All of the following
Dell Poweredge C6620 Firmware<2.0.0
Dell Poweredge C6620
All of the following
Dell Poweredge Mx760c Firmware<2.0.0
Dell Poweredge Mx760c
All of the following
Dell Poweredge R860 Firmware<1.8.0
Dell Poweredge R860
All of the following
Dell Poweredge R960 Firmware<1.8.0
Dell Poweredge R960
All of the following
Dell Poweredge Hs5610 Firmware<2.0.0
Dell Poweredge Hs5610
All of the following
Dell Poweredge Hs5620 Firmware<2.0.0
Dell Poweredge Hs5620
All of the following
Dell Poweredge R660xs Firmware<2.0.0
Dell Poweredge R660xs
All of the following
Dell Poweredge R760xs Firmware<2.0.0
Dell Poweredge R760xs
All of the following
Dell Poweredge R760xd2 Firmware<2.0.0
Dell Poweredge R760xd2
All of the following
Dell Poweredge T560 Firmware<2.0.0
Dell Poweredge T560
All of the following
Dell Poweredge R760xa Firmware<2.0.0
Dell Poweredge R760xa
All of the following
Dell Poweredge Xe9680 Firmware<1.8.0
Dell Poweredge Xe9680
All of the following
Dell Poweredge Xr5610 Firmware<1.8.0
Dell Poweredge Xr5610
All of the following
Dell Poweredge Xr8610t Firmware<1.8.0
Dell Poweredge Xr8610t
All of the following
Dell Poweredge Xr8620t Firmware<1.8.0
Dell Poweredge Xr8620t
All of the following
Dell Poweredge Xr7620 Firmware<1.8.0
Dell Poweredge Xr7620
All of the following
Dell Poweredge Xe8640 Firmware<1.8.0
Dell Poweredge Xe8640
All of the following
Dell Poweredge Xe9640 Firmware<1.8.0
Dell Poweredge Xe9640
All of the following
Dell Poweredge R6615 Firmware<1.7.2
Dell Poweredge R6615
All of the following
Dell Poweredge R7615 Firmware<1.7.2
Dell Poweredge R7615
All of the following
Dell Poweredge R6625 Firmware<1.7.2
Dell Poweredge R6625
All of the following
Dell Poweredge R7625 Firmware<1.7.2
Dell Poweredge R7625
All of the following
Dell Poweredge C6615 Firmware<1.2.3
Dell Poweredge C6615
All of the following
Dell Poweredge R650 Firmware<1.13.2
Dell Poweredge R650
All of the following
Dell Poweredge R750 Firmware<1.13.2
Dell Poweredge R750
All of the following
Dell Poweredge R750xa Firmware<1.13.2
Dell Poweredge R750xa
All of the following
Dell Poweredge C6520 Firmware<1.13.2
Dell Poweredge C6520
All of the following
Dell Poweredge Mx750c Firmware<1.13.2
Dell Poweredge Mx750c
All of the following
Dell Poweredge R550 Firmware<1.13.2
Dell Poweredge R550
All of the following
Dell Poweredge R450 Firmware<1.13.2
Dell Poweredge R450
All of the following
Dell Poweredge R650xs Firmware<1.13.2
Dell Poweredge R650xs
All of the following
Dell Poweredge R750xs Firmware<1.13.2
Dell Poweredge R750xs
All of the following
Dell Poweredge T550 Firmware<1.13.2
Dell Poweredge T550
All of the following
Dell Poweredge Xr11 Firmware<1.13.2
Dell Poweredge Xr11
All of the following
Dell Poweredge Xr12 Firmware<1.13.2
Dell Poweredge Xr12
All of the following
Dell Poweredge T150 Firmware<1.9.1
Dell Poweredge T150
All of the following
Dell Poweredge T350 Firmware<1.9.1
Dell Poweredge T350
All of the following
Dell Poweredge R250 Firmware<1.9.1
Dell Poweredge R250
All of the following
Dell Poweredge R350 Firmware<1.9.1
Dell Poweredge R350
All of the following
Dell Poweredge Xr4510c Firmware<1.14.1
Dell Poweredge Xr4510c
All of the following
Dell Poweredge Xr4520c Firmware<1.14.1
Dell Poweredge Xr4520c
All of the following
Dell Poweredge R6515 Firmware<2.14.1
Dell Poweredge R6515
All of the following
Dell Poweredge R6525 Firmware<2.14.1
Dell Poweredge R6525
All of the following
Dell Poweredge R7515 Firmware<2.14.1
Dell Poweredge R7515
All of the following
Dell Poweredge R7525 Firmware<2.14.1
Dell Poweredge R7525
All of the following
Dell Poweredge C6525 Firmware<2.14.1
Dell Poweredge C6525
All of the following
Dell Poweredge Xe8545 Firmware<2.14.1
Dell Poweredge Xe8545
All of the following
Dell Xc Core Xc660 Firmware<2.0.0
Dell Xc Core Xc660
All of the following
Dell Xc Core Xc760 Firmware<2.0.0
Dell Xc Core Xc760
All of the following
Dell Xc Core Xc7625 Firmware<1.7.2
Dell Xc Core Xc7625
All of the following
Dell Emc Xc Core Xc450 Firmware<1.13.2
Dell Emc Xc Core Xc450
All of the following
Dell Emc Xc Core Xc650 Firmware<1.13.2
Dell Emc Xc Core Xc650
All of the following
Dell Emc Xc Core Xc750 Firmware<1.13.2
Dell Emc Xc Core Xc750
All of the following
Dell Emc Xc Core Xc750xa Firmware<1.13.2
Dell Emc Xc Core Xc750xa
All of the following
Dell Emc Xc Core Xc6520 Firmware<1.13.2
Dell Emc Xc Core Xc6520
All of the following
Dell Emc Xc Core Xc7525 Firmware<2.14.1
Dell Emc Xc Core Xc7525
Event History
Mar 13, 2024
CVE Published
via MITRE·04:28 PM
Data Sourced
via MITRE·04:28 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-0163?
The severity of CVE-2024-0163 is categorized as medium.
2
How do I fix CVE-2024-0163?
To fix CVE-2024-0163, users should update to the latest firmware version provided by Dell for their affected PowerEdge Server models.
3
Which Dell products are affected by CVE-2024-0163?
CVE-2024-0163 affects various Dell PowerEdge Server BIOS including models R660, R760, C6620, MX760C, and others.
4
What type of vulnerability is CVE-2024-0163?
CVE-2024-0163 is a time-of-check-time-of-use (TOCTOU) race condition vulnerability.
5
Who can exploit CVE-2024-0163?
CVE-2024-0163 can potentially be exploited by a local low privileged attacker to gain access to unauthorized resources.