CVE-2023-32460: Dell Dss 8440 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

Affected products

Dell Dss 8440 Firmware: before 2.20.0 (fixed in 2.20.0)
Dell Emc NX440 Firmware: before 2.15.1 (fixed in 2.15.1)
Dell Emc Storage NX3240 Firmware: before 2.20.1 (fixed in 2.20.1)
Dell Emc Storage NX3340 Firmware: before 2.20.1 (fixed in 2.20.1)
Dell Emc Xc Core 6420 Firmware: before 2.20.1 (fixed in 2.20.1)
Dell Emc Xc Core XC450 Firmware: before 1.12.1 (fixed in 1.12.1)
Dell Emc Xc Core XC640 Firmware: before 2.20.1 (fixed in 2.20.1)
Dell Emc Xc Core XC650 Firmware: before 1.12.1 (fixed in 1.12.1)
Dell Emc Xc Core XC6520 Firmware: before 1.12.1 (fixed in 1.12.1)
Dell Emc Xc Core XC740XD2 Firmware: before 2.20.1 (fixed in 2.20.1)
Dell Emc Xc Core XC740XD Firmware: before 2.20.1 (fixed in 2.20.1)
Dell Emc Xc Core XC750 Firmware: before 1.12.1 (fixed in 1.12.1)
Dell Emc Xc Core XC750XA Firmware: before 1.12.1 (fixed in 1.12.1)
Dell Emc Xc Core XC7525 Firmware: before 2.13.3 (fixed in 2.13.3)
Dell Emc Xc Core XC940 Firmware: before 2.20.1 (fixed in 2.20.1)
Dell Emc Xc Core XCXR2 Firmware: before 2.20.1 (fixed in 2.20.1)
Dell NX3230 Firmware: before 2.18.1 (fixed in 2.18.1)
Dell NX3330 Firmware: before 2.18.1 (fixed in 2.18.1)
Dell NX430 Firmware: before 2.19.1 (fixed in 2.19.1)
Dell Poweredge c4130 Firmware: before 2.18.1 (fixed in 2.18.1)
Dell Poweredge c4140 Firmware: before 2.20.1 (fixed in 2.20.1)
Dell Poweredge c6320 Firmware: before 2.18.2 (fixed in 2.18.2)
Dell Poweredge c6420 Firmware: before 2.20.1 (fixed in 2.20.1)
Dell Poweredge c6520 Firmware: before 1.12.1 (fixed in 1.12.1)
Dell Poweredge c6525 Firmware: before 2.13.3 (fixed in 2.13.3)
and 101 more

Published 2023-12-08. Last modified 2026-06-17.