poweredge_r660_firmware 安全漏洞 (CVE-2023-32461)

CVE编号

CVE-2023-32461

利用情况

暂无

补丁情况

N/A

披露时间

2023-05-09
漏洞描述
Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges.


解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接
https://www.dell.com/support/kbdoc/en-us/000216543/dsa-2023-292-security-upda...
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
系统 dell emc_xc_core_xc450_firmware * Up to
(excluding)
1.11.2
运行在以下环境
系统 dell emc_xc_core_xc650_firmware * Up to
(excluding)
1.11.2
运行在以下环境
系统 dell emc_xc_core_xc6520_firmware * Up to
(excluding)
1.11.2
运行在以下环境
系统 dell emc_xc_core_xc750xa_firmware * Up to
(excluding)
1.11.2
运行在以下环境
系统 dell emc_xc_core_xc750_firmware * Up to
(excluding)
1.11.2
运行在以下环境
系统 dell emc_xc_core_xc7525_firmware * Up to
(excluding)
2.11.3
运行在以下环境
系统 dell poweredge_c6520_firmware * Up to
(excluding)
1.10.2
运行在以下环境
系统 dell poweredge_c6525_firmware * Up to
(excluding)
2.11.3
运行在以下环境
系统 dell poweredge_c6620_firmware * Up to
(excluding)
1.5.6
运行在以下环境
系统 dell poweredge_hs5610_firmware * Up to
(excluding)
1.5.6
运行在以下环境
系统 dell poweredge_hs5620_firmware * Up to
(excluding)
1.5.6
运行在以下环境
系统 dell poweredge_mx750c_firmware * Up to
(excluding)
1.10.2
运行在以下环境
系统 dell poweredge_mx760c_firmware * Up to
(excluding)
1.5.6
运行在以下环境
系统 dell poweredge_r250_firmware * Up to
(excluding)
1.6.3
运行在以下环境
系统 dell poweredge_r350_firmware * Up to
(excluding)
1.6.3
运行在以下环境
系统 dell poweredge_r450_firmware * Up to
(excluding)
1.10.2
运行在以下环境
系统 dell poweredge_r550_firmware * Up to
(excluding)
1.10.2
运行在以下环境
系统 dell poweredge_r650xs_firmware * Up to
(excluding)
1.10.2
运行在以下环境
系统 dell poweredge_r650_firmware * Up to
(excluding)
1.10.2
运行在以下环境
系统 dell poweredge_r6515_firmware * Up to
(excluding)
2.11.4
运行在以下环境
系统 dell poweredge_r6525_firmware * Up to
(excluding)
2.11.3
运行在以下环境
系统 dell poweredge_r660xs_firmware * Up to
(excluding)
1.5.6
运行在以下环境
系统 dell poweredge_r660_firmware * Up to
(excluding)
1.5.6
运行在以下环境
系统 dell poweredge_r6615_firmware * Up to
(excluding)
1.3.11
运行在以下环境
系统 dell poweredge_r6625_firmware * Up to
(excluding)
1.3.11
运行在以下环境
系统 dell poweredge_r750xa_firmware * Up to
(excluding)
1.10.2
运行在以下环境
系统 dell poweredge_r750xs_firmware * Up to
(excluding)
1.10.2
运行在以下环境
系统 dell poweredge_r750_firmware * Up to
(excluding)
1.10.2
运行在以下环境
系统 dell poweredge_r7515_firmware * Up to
(excluding)
2.11.4
运行在以下环境
系统 dell poweredge_r7525_firmware * Up to
(excluding)
2.11.3
运行在以下环境
系统 dell poweredge_r760xa_firmware * Up to
(excluding)
1.1.3
运行在以下环境
系统 dell poweredge_r760xd2_firmware * Up to
(excluding)
1.5.6
运行在以下环境
系统 dell poweredge_r760xs_firmware * Up to
(excluding)
1.5.6
运行在以下环境
系统 dell poweredge_r760_firmware * Up to
(excluding)
1.5.6
运行在以下环境
系统 dell poweredge_r7615_firmware * Up to
(excluding)
1.3.11
运行在以下环境
系统 dell poweredge_r7625_firmware * Up to
(excluding)
1.3.11
运行在以下环境
系统 dell poweredge_r860_firmware * Up to
(excluding)
1.5.6
运行在以下环境
系统 dell poweredge_r960_firmware * Up to
(excluding)
1.5.6
运行在以下环境
系统 dell poweredge_t150_firmware * Up to
(excluding)
1.6.3
运行在以下环境
系统 dell poweredge_t350_firmware * Up to
(excluding)
1.6.3
运行在以下环境
系统 dell poweredge_t550_firmware * Up to
(excluding)
1.10.2
运行在以下环境
系统 dell poweredge_t560_firmware * Up to
(excluding)
1.5.6
运行在以下环境
系统 dell poweredge_xe8545_firmware * Up to
(excluding)
2.11.3
运行在以下环境
系统 dell poweredge_xe8640_firmware * Up to
(excluding)
1.2.5
运行在以下环境
系统 dell poweredge_xe9680_firmware * Up to
(excluding)
1.1.3
运行在以下环境
系统 dell poweredge_xr11_firmware * Up to
(excluding)
1.10.2
运行在以下环境
系统 dell poweredge_xr12_firmware * Up to
(excluding)
1.10.2
运行在以下环境
系统 dell poweredge_xr4510c_firmware * Up to
(excluding)
1.10.4
运行在以下环境
系统 dell poweredge_xr4520c_firmware * Up to
(excluding)
1.10.4
运行在以下环境
系统 dell poweredge_xr4520c_firmware 1.10.4 -
运行在以下环境
系统 dell poweredge_xr5610_firmware * Up to
(excluding)
1.1.4
运行在以下环境
系统 dell poweredge_xr7620_firmware * Up to
(excluding)
1.5.6
运行在以下环境
系统 dell poweredge_xr8620t_firmware * Up to
(excluding)
1.1.3
运行在以下环境
硬件 dell emc_xc_core_xc450 - -
运行在以下环境
硬件 dell emc_xc_core_xc650 - -
运行在以下环境
硬件 dell emc_xc_core_xc6520 - -
运行在以下环境
硬件 dell emc_xc_core_xc750 - -
运行在以下环境
硬件 dell emc_xc_core_xc750xa - -
运行在以下环境
硬件 dell emc_xc_core_xc7525 - -
运行在以下环境
硬件 dell poweredge_c6520 - -
运行在以下环境
硬件 dell poweredge_c6525 - -
运行在以下环境
硬件 dell poweredge_c6620 - -
运行在以下环境
硬件 dell poweredge_hs5610 - -
运行在以下环境
硬件 dell poweredge_hs5620 - -
运行在以下环境
硬件 dell poweredge_mx750c - -
运行在以下环境
硬件 dell poweredge_mx760c - -
运行在以下环境
硬件 dell poweredge_r250 - -
运行在以下环境
硬件 dell poweredge_r350 - -
运行在以下环境
硬件 dell poweredge_r450 - -
运行在以下环境
硬件 dell poweredge_r550 - -
运行在以下环境
硬件 dell poweredge_r650 - -
运行在以下环境
硬件 dell poweredge_r650xs - -
运行在以下环境
硬件 dell poweredge_r6515 - -
运行在以下环境
硬件 dell poweredge_r6525 - -
运行在以下环境
硬件 dell poweredge_r660 - -
运行在以下环境
硬件 dell poweredge_r660xs - -
运行在以下环境
硬件 dell poweredge_r6615 - -
运行在以下环境
硬件 dell poweredge_r6625 - -
运行在以下环境
硬件 dell poweredge_r750 - -
运行在以下环境
硬件 dell poweredge_r750xa - -
运行在以下环境
硬件 dell poweredge_r750xs - -
运行在以下环境
硬件 dell poweredge_r7515 - -
运行在以下环境
硬件 dell poweredge_r7525 - -
运行在以下环境
硬件 dell poweredge_r760 - -
运行在以下环境
硬件 dell poweredge_r760xa - -
运行在以下环境
硬件 dell poweredge_r760xd2 - -
运行在以下环境
硬件 dell poweredge_r760xs - -
运行在以下环境
硬件 dell poweredge_r7615 - -
运行在以下环境
硬件 dell poweredge_r7625 - -
运行在以下环境
硬件 dell poweredge_r860 - -
运行在以下环境
硬件 dell poweredge_r960 - -
运行在以下环境
硬件 dell poweredge_t150 - -
运行在以下环境
硬件 dell poweredge_t350 - -
运行在以下环境
硬件 dell poweredge_t550 - -
运行在以下环境
硬件 dell poweredge_t560 - -
运行在以下环境
硬件 dell poweredge_xe8545 - -
运行在以下环境
硬件 dell poweredge_xe8640 - -
运行在以下环境
硬件 dell poweredge_xe9680 - -
运行在以下环境
硬件 dell poweredge_xr11 - -
运行在以下环境
硬件 dell poweredge_xr12 - -
运行在以下环境
硬件 dell poweredge_xr4510c - -
运行在以下环境
硬件 dell poweredge_xr4520c - -
运行在以下环境
硬件 dell poweredge_xr5610 - -
运行在以下环境
硬件 dell poweredge_xr7620 - -
运行在以下环境
硬件 dell poweredge_xr8620t - -
CVSS3评分
6.7
  • 攻击路径
    本地
  • 攻击复杂度
    低
  • 权限要求
    高
  • 影响范围
    未更改
  • 用户交互
    无
  • 可用性
    高
  • 保密性
    高
  • 完整性
    高
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-ID 漏洞类型
CWE-122 堆缓冲区溢出
阿里云安全产品覆盖情况