CVE-2024-0172: Dell Dss 8440 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

Affected products

  • Dell Dss 8440 Firmware: before 2.19.0 (fixed in 2.19.0)
  • Dell Emc Storage NX3240 Firmware: before 2.19.1 (fixed in 2.19.1)
  • Dell Emc Storage NX3340 Firmware: before 2.19.1 (fixed in 2.19.1)
  • Dell Emc Xc Core 6420 System Firmware: before 2.19.1 (fixed in 2.19.1)
  • Dell Emc Xc Core XC450 Firmware: before 1.11.2 (fixed in 1.11.2)
  • Dell Emc Xc Core XC640 System Firmware: before 2.19.1 (fixed in 2.19.1)
  • Dell Emc Xc Core XC650 Firmware: before 1.11.2 (fixed in 1.11.2)
  • Dell Emc Xc Core XC6520 Firmware: before 1.11.2 (fixed in 1.11.2)
  • Dell Emc Xc Core XC740XD2 Firmware: before 2.19.1 (fixed in 2.19.1)
  • Dell Emc Xc Core XC740XD System Firmware: before 2.19.1 (fixed in 2.19.1)
  • Dell Emc Xc Core XC750 Firmware: before 1.11.2 (fixed in 1.11.2)
  • Dell Emc Xc Core XC750XA Firmware: before 1.11.2 (fixed in 1.11.2)
  • Dell Emc Xc Core XC7525 Firmware: before 2.12.4 (fixed in 2.12.4)
  • Dell Emc Xc Core XC940 System Firmware: before 2.19.1 (fixed in 2.19.1)
  • Dell Emc Xc Core XCXR2 Firmware: before 2.19.1 (fixed in 2.19.1)
  • Dell NX440 Firmware: before 2.14.1 (fixed in 2.14.1)
  • Dell Poweredge c4140 Firmware: before 2.19.1 (fixed in 2.19.1)
  • Dell Poweredge c6420 Firmware: before 2.19.1 (fixed in 2.19.1)
  • Dell Poweredge c6520 Firmware: before 1.11.2 (fixed in 1.11.2)
  • Dell Poweredge c6525 Firmware: before 2.12.4 (fixed in 2.12.4)
  • Dell Poweredge c6620 Firmware: before 1.5.6 (fixed in 1.5.6)
  • Dell Poweredge FC640 Firmware: before 2.19.1 (fixed in 2.19.1)
  • Dell Poweredge HS5610 Firmware: before 1.5.6 (fixed in 1.5.6)
  • Dell Poweredge HS5620 Firmware: before 1.5.6 (fixed in 1.5.6)
  • Dell Poweredge m640 (pe Vrtx) Firmware: before 2.19.1 (fixed in 2.19.1)
  • and 68 more

Published 2024-04-03. Last modified 2026-06-17.