Heap-based buffer overflow in Dell PowerEdge Platform
Priority LOW 29CWE-122Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-122 and the CVSS impact.
Summary
Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00174 6th percentileScored 2026-11-07
Fix Fixed PowerEdge Platform (Dell): 1.5.6, 1.1.3, 1.1.4 +7
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dell | PowerEdge Platform | before 1.5.6; before 1.1.3; before 1.1.4; before 1.2.5; before 1.3.11; before 1.10.2; before 1.6.3; before 1.10.4; before 2.11.4; before 2.11.3; Versions prior to Before 1.11.2 | 1.5.6, 1.1.3, 1.1.4, 1.2.5, 1.3.11, 1.10.2, 1.6.3, 1.10.4, 2.11.4, 2.11.3 | Patch available | CNA |
- PowerEdge Platform VendorDell Affected before 1.5.6; before 1.1.3; before 1.1.4; before 1.2.5; before 1.3.11; before 1.10.2; before 1.6.3; before 1.10.4; before 2.11.4; before 2.11.3; Versions prior to Before 1.11.2 Fixed in 1.5.6, 1.1.3, 1.1.4, 1.2.5, 1.3.11, 1.10.2, 1.6.3, 1.10.4, 2.11.4, 2.11.3 Patch available CNA
CPE configurations NVD · 105
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:poweredge_r660_firmware:*:*:*:*:*:*:*:* | before 1.5.6 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r660:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r760_firmware:*:*:*:*:*:*:*:* | before 1.5.6 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r760:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_c6620_firmware:*:*:*:*:*:*:*:* | before 1.5.6 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_c6620:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_mx760c_firmware:*:*:*:*:*:*:*:* | before 1.5.6 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_mx760c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r860_firmware:*:*:*:*:*:*:*:* | before 1.5.6 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r860:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:poweredge_r660_firmware:*:*:*:*:*:*:*:* Versions before 1.5.6 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r660:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r760_firmware:*:*:*:*:*:*:*:* Versions before 1.5.6 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r760:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_c6620_firmware:*:*:*:*:*:*:*:* Versions before 1.5.6 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_c6620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_mx760c_firmware:*:*:*:*:*:*:*:* Versions before 1.5.6 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_mx760c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r860_firmware:*:*:*:*:*:*:*:* Versions before 1.5.6 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r860:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Show 95 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:poweredge_r960_firmware:*:*:*:*:*:*:*:* | before 1.5.6 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r960:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_hs5610_firmware:*:*:*:*:*:*:*:* | before 1.5.6 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_hs5610:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_hs5620_firmware:*:*:*:*:*:*:*:* | before 1.5.6 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_hs5620:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r660xs_firmware:*:*:*:*:*:*:*:* | before 1.5.6 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r660xs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r760xs_firmware:*:*:*:*:*:*:*:* | before 1.5.6 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r760xs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r760xd2_firmware:*:*:*:*:*:*:*:* | before 1.5.6 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r760xd2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_t560_firmware:*:*:*:*:*:*:*:* | before 1.5.6 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_t560:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r760xa_firmware:*:*:*:*:*:*:*:* | before 1.1.3 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r760xa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_xe9680_firmware:*:*:*:*:*:*:*:* | before 1.1.3 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_xe9680:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_xr5610_firmware:*:*:*:*:*:*:*:* | before 1.1.4 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_xr5610:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_xr8620t_firmware:*:*:*:*:*:*:*:* | before 1.1.3 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_xr8620t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_xr7620_firmware:*:*:*:*:*:*:*:* | before 1.5.6 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_xr7620:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_xe8640_firmware:*:*:*:*:*:*:*:* | before 1.2.5 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_xe8640:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r6615_firmware:*:*:*:*:*:*:*:* | before 1.3.11 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r6615:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r7615_firmware:*:*:*:*:*:*:*:* | before 1.3.11 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r7615:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r6625_firmware:*:*:*:*:*:*:*:* | before 1.3.11 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r6625:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r7625_firmware:*:*:*:*:*:*:*:* | before 1.3.11 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r7625:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r650_firmware:*:*:*:*:*:*:*:* | before 1.10.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r650:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r750_firmware:*:*:*:*:*:*:*:* | before 1.10.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r750xa_firmware:*:*:*:*:*:*:*:* | before 1.10.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r750xa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_c6520_firmware:*:*:*:*:*:*:*:* | before 1.10.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_c6520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_mx750c_firmware:*:*:*:*:*:*:*:* | before 1.10.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_mx750c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r550_firmware:*:*:*:*:*:*:*:* | before 1.10.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r550:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r450_firmware:*:*:*:*:*:*:*:* | before 1.10.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r450:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r650xs_firmware:*:*:*:*:*:*:*:* | before 1.10.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r650xs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r750xs_firmware:*:*:*:*:*:*:*:* | before 1.10.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r750xs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_t550_firmware:*:*:*:*:*:*:*:* | before 1.10.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_t550:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_xr11_firmware:*:*:*:*:*:*:*:* | before 1.10.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_xr11:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_xr12_firmware:*:*:*:*:*:*:*:* | before 1.10.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_xr12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_t150_firmware:*:*:*:*:*:*:*:* | before 1.6.3 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_t150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_t350_firmware:*:*:*:*:*:*:*:* | before 1.6.3 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_t350:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r250_firmware:*:*:*:*:*:*:*:* | before 1.6.3 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r250:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r350_firmware:*:*:*:*:*:*:*:* | before 1.6.3 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r350:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_xr4510c_firmware:*:*:*:*:*:*:*:* | before 1.10.4 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_xr4510c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_xr4520c_firmware:*:*:*:*:*:*:*:* | before 1.10.4 | Vulnerable | Dell |
| cpe:2.3:o:dell:poweredge_xr4520c_firmware:1.10.4:*:*:*:*:*:*:* | 1.10.4 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_xr4520c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r6515_firmware:*:*:*:*:*:*:*:* | before 2.11.4 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r6515:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r6525_firmware:*:*:*:*:*:*:*:* | before 2.11.3 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r6525:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r7515_firmware:*:*:*:*:*:*:*:* | before 2.11.4 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r7515:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_r7525_firmware:*:*:*:*:*:*:*:* | before 2.11.3 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_r7525:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_c6525_firmware:*:*:*:*:*:*:*:* | before 2.11.3 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_c6525:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:poweredge_xe8545_firmware:*:*:*:*:*:*:*:* | before 2.11.3 | Vulnerable | Dell |
| cpe:2.3:h:dell:poweredge_xe8545:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:emc_xc_core_xc450_firmware:*:*:*:*:*:*:*:* | before 1.11.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:emc_xc_core_xc450:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:emc_xc_core_xc650_firmware:*:*:*:*:*:*:*:* | before 1.11.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:emc_xc_core_xc650:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:emc_xc_core_xc750_firmware:*:*:*:*:*:*:*:* | before 1.11.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:emc_xc_core_xc750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:emc_xc_core_xc750xa_firmware:*:*:*:*:*:*:*:* | before 1.11.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:emc_xc_core_xc750xa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:emc_xc_core_xc6520_firmware:*:*:*:*:*:*:*:* | before 1.11.2 | Vulnerable | Dell |
| cpe:2.3:h:dell:emc_xc_core_xc6520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:emc_xc_core_xc7525_firmware:*:*:*:*:*:*:*:* | before 2.11.3 | Vulnerable | Dell |
| cpe:2.3:h:dell:emc_xc_core_xc7525:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:poweredge_r960_firmware:*:*:*:*:*:*:*:* Versions before 1.5.6 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r960:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_hs5610_firmware:*:*:*:*:*:*:*:* Versions before 1.5.6 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_hs5610:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_hs5620_firmware:*:*:*:*:*:*:*:* Versions before 1.5.6 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_hs5620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r660xs_firmware:*:*:*:*:*:*:*:* Versions before 1.5.6 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r660xs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r760xs_firmware:*:*:*:*:*:*:*:* Versions before 1.5.6 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r760xs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r760xd2_firmware:*:*:*:*:*:*:*:* Versions before 1.5.6 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r760xd2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_t560_firmware:*:*:*:*:*:*:*:* Versions before 1.5.6 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_t560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r760xa_firmware:*:*:*:*:*:*:*:* Versions before 1.1.3 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r760xa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_xe9680_firmware:*:*:*:*:*:*:*:* Versions before 1.1.3 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_xe9680:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_xr5610_firmware:*:*:*:*:*:*:*:* Versions before 1.1.4 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_xr5610:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_xr8620t_firmware:*:*:*:*:*:*:*:* Versions before 1.1.3 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_xr8620t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_xr7620_firmware:*:*:*:*:*:*:*:* Versions before 1.5.6 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_xr7620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_xe8640_firmware:*:*:*:*:*:*:*:* Versions before 1.2.5 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_xe8640:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r6615_firmware:*:*:*:*:*:*:*:* Versions before 1.3.11 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r6615:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r7615_firmware:*:*:*:*:*:*:*:* Versions before 1.3.11 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r7615:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r6625_firmware:*:*:*:*:*:*:*:* Versions before 1.3.11 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r6625:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r7625_firmware:*:*:*:*:*:*:*:* Versions before 1.3.11 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r7625:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r650_firmware:*:*:*:*:*:*:*:* Versions before 1.10.2 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r750_firmware:*:*:*:*:*:*:*:* Versions before 1.10.2 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r750xa_firmware:*:*:*:*:*:*:*:* Versions before 1.10.2 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r750xa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_c6520_firmware:*:*:*:*:*:*:*:* Versions before 1.10.2 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_c6520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_mx750c_firmware:*:*:*:*:*:*:*:* Versions before 1.10.2 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_mx750c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r550_firmware:*:*:*:*:*:*:*:* Versions before 1.10.2 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r450_firmware:*:*:*:*:*:*:*:* Versions before 1.10.2 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r650xs_firmware:*:*:*:*:*:*:*:* Versions before 1.10.2 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r650xs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r750xs_firmware:*:*:*:*:*:*:*:* Versions before 1.10.2 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r750xs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_t550_firmware:*:*:*:*:*:*:*:* Versions before 1.10.2 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_t550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_xr11_firmware:*:*:*:*:*:*:*:* Versions before 1.10.2 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_xr11:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_xr12_firmware:*:*:*:*:*:*:*:* Versions before 1.10.2 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_xr12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_t150_firmware:*:*:*:*:*:*:*:* Versions before 1.6.3 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_t150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_t350_firmware:*:*:*:*:*:*:*:* Versions before 1.6.3 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_t350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r250_firmware:*:*:*:*:*:*:*:* Versions before 1.6.3 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r350_firmware:*:*:*:*:*:*:*:* Versions before 1.6.3 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_xr4510c_firmware:*:*:*:*:*:*:*:* Versions before 1.10.4 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_xr4510c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_xr4520c_firmware:*:*:*:*:*:*:*:* Versions before 1.10.4 Vulnerable ·Dell
- cpe:2.3:o:dell:poweredge_xr4520c_firmware:1.10.4:*:*:*:*:*:*:* Versions 1.10.4 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_xr4520c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r6515_firmware:*:*:*:*:*:*:*:* Versions before 2.11.4 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r6515:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r6525_firmware:*:*:*:*:*:*:*:* Versions before 2.11.3 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r6525:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r7515_firmware:*:*:*:*:*:*:*:* Versions before 2.11.4 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r7515:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_r7525_firmware:*:*:*:*:*:*:*:* Versions before 2.11.3 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_r7525:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_c6525_firmware:*:*:*:*:*:*:*:* Versions before 2.11.3 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_c6525:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:poweredge_xe8545_firmware:*:*:*:*:*:*:*:* Versions before 2.11.3 Vulnerable ·Dell
- cpe:2.3:h:dell:poweredge_xe8545:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:emc_xc_core_xc450_firmware:*:*:*:*:*:*:*:* Versions before 1.11.2 Vulnerable ·Dell
- cpe:2.3:h:dell:emc_xc_core_xc450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:emc_xc_core_xc650_firmware:*:*:*:*:*:*:*:* Versions before 1.11.2 Vulnerable ·Dell
- cpe:2.3:h:dell:emc_xc_core_xc650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:emc_xc_core_xc750_firmware:*:*:*:*:*:*:*:* Versions before 1.11.2 Vulnerable ·Dell
- cpe:2.3:h:dell:emc_xc_core_xc750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:emc_xc_core_xc750xa_firmware:*:*:*:*:*:*:*:* Versions before 1.11.2 Vulnerable ·Dell
- cpe:2.3:h:dell:emc_xc_core_xc750xa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:emc_xc_core_xc6520_firmware:*:*:*:*:*:*:*:* Versions before 1.11.2 Vulnerable ·Dell
- cpe:2.3:h:dell:emc_xc_core_xc6520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:emc_xc_core_xc7525_firmware:*:*:*:*:*:*:*:* Versions before 2.11.3 Vulnerable ·Dell
- cpe:2.3:h:dell:emc_xc_core_xc7525:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Remediation
- Fix · CNA PowerEdge Platform (Dell) Fixed in 1.5.6, 1.1.3, 1.1.4, 1.2.5, 1.3.11, 1.10.2, 1.6.3, 1.10.4, 2.11.4, 2.11.3
Timeline
- 2026-10-02 Threatist record created from CVE-2023-32461
- 2026-10-03 Alias added: GHSA-42c8-mv2f-c47w
References
More Dell Emc Xc Core Xc450 Firmware vulnerabilities
- TI-2024-00150 Memory corruption in Dell PowerEdge BIOS Intel 16G CVSS 3.1HIGH 8.8
- TI-2023-15743 Missing authentication in Dell PowerEdge Platform CVSS 3.1HIGH 8.8
- TI-2024-00149 Improper input validation in Dell PowerEdge Platform CVSS 3.1HIGH 8.4
- TI-2024-00160 Improper privilege management in Dell PowerEdge Platform CVSS 3.1HIGH 7.9
- TI-2024-00151 Time-of-check time-of-use race condition in Dell PowerEdge BIOS Intel 16G CVSS 3.1MEDIUM 6.3
- TI-2025-19429 Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information… CVSS 3.1MEDIUM 4.9
Sources
- CVE-2023-32461 · CVE Program
- CVE-2023-32461 · NVD
- FIRST EPSS
- GHSA-42c8-mv2f-c47w · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences