CVE-2023-32460

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

Vendor	Product	Versions
Dell	PowerEdge Platform	Versions prior to 1.6.6; Versions prior to 1.3.6; Versions prior to 1.1.2; Versions prior to 1.12.1; Versions prior to 1.8.1; Versions prior to 1.13.3; Versions prior to 2.13.3; Versions prior to 2.20.1; Versions prior to 2.20.0; Versions prior to 2.15.1; Versions prior to 1.21.0; Versions prior to 2.18.1; Versions prior to 2.13.0; Versions prior to 2.18.2; Versions prior to 1.18.1; Versions prior to 2.19.1

References

Timeline

Published: Dec 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-324616.7Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could pote CVE-2023-324629.8Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authentication CVE-2023-324637.5Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated CVE-2023-324643.3Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may pote CVE-2023-324658.8Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability CVE-2023-324665.7Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with hig CVE-2023-324678.2Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with hig CVE-2023-324684.9Dell ECS Streamer, versions prior to 2.0.7.1, contain an insertion of sensitive information in log files vulnerability. A remote malicious h CVE-2023-324696.7Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges CVE-2023-32474.3In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value genera CVE-2023-324705.5Dell Digital Delivery versions prior to 5.0.82.0 contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local mali CVE-2023-324716.0Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated malicious user with high