CVE-2023-32461: Dell Emc Xc Core XC450 Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges.  

Affected products

  • Dell Emc Xc Core XC450 Firmware: before 1.11.2 (fixed in 1.11.2)
  • Dell Emc Xc Core XC650 Firmware: before 1.11.2 (fixed in 1.11.2)
  • Dell Emc Xc Core XC6520 Firmware: before 1.11.2 (fixed in 1.11.2)
  • Dell Emc Xc Core XC750 Firmware: before 1.11.2 (fixed in 1.11.2)
  • Dell Emc Xc Core XC750XA Firmware: before 1.11.2 (fixed in 1.11.2)
  • Dell Emc Xc Core XC7525 Firmware: before 2.11.3 (fixed in 2.11.3)
  • Dell Poweredge c6520 Firmware: before 1.10.2 (fixed in 1.10.2)
  • Dell Poweredge c6525 Firmware: before 2.11.3 (fixed in 2.11.3)
  • Dell Poweredge c6620 Firmware: before 1.5.6 (fixed in 1.5.6)
  • Dell Poweredge HS5610 Firmware: before 1.5.6 (fixed in 1.5.6)
  • Dell Poweredge HS5620 Firmware: before 1.5.6 (fixed in 1.5.6)
  • Dell Poweredge MX750C Firmware: before 1.10.2 (fixed in 1.10.2)
  • Dell Poweredge MX760C Firmware: before 1.5.6 (fixed in 1.5.6)
  • Dell Poweredge r250 Firmware: before 1.6.3 (fixed in 1.6.3)
  • Dell Poweredge r350 Firmware: before 1.6.3 (fixed in 1.6.3)
  • Dell Poweredge r450 Firmware: before 1.10.2 (fixed in 1.10.2)
  • Dell Poweredge r550 Firmware: before 1.10.2 (fixed in 1.10.2)
  • Dell Poweredge r650 Firmware: before 1.10.2 (fixed in 1.10.2)
  • Dell Poweredge r650xs Firmware: before 1.10.2 (fixed in 1.10.2)
  • Dell Poweredge r6515 Firmware: before 2.11.4 (fixed in 2.11.4)
  • Dell Poweredge r6525 Firmware: before 2.11.3 (fixed in 2.11.3)
  • Dell Poweredge r660 Firmware: before 1.5.6 (fixed in 1.5.6)
  • Dell Poweredge r660xs Firmware: before 1.5.6 (fixed in 1.5.6)
  • Dell Poweredge r6615 Firmware: before 1.3.11 (fixed in 1.3.11)
  • Dell Poweredge r6625 Firmware: before 1.3.11 (fixed in 1.3.11)
  • and 27 more

Published 2023-09-15. Last modified 2026-06-17.