CVE-2024-0163

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Mar 13, 2024
CWE ID 367

Summary

CVE-2024-0163 is a newly disclosed vulnerability affecting Dell PowerEdge Server and Dell Precision Rack BIOS. This issue involves a TOCTOU (Time of Check to Time of Use) race condition, which can allow a local, low privileged attacker to bypass security restrictions and access unauthorized resources. By exploiting this vulnerability, the attacker may gain elevated privileges and potentially compromise the entire system. This vulnerability poses a significant risk and requires immediate attention from Dell and its users to apply available patches or workarounds.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share