CVE-2024-0172

Local privilege escalation through undisclosed BIOS flaw

Published Apr 3, 2024 · Updated Aug 20, 2024

Improper privilege management in Dell PowerEdge Server BIOS allows unauthenticated local users to gain elevated privileges. Dell has not published the affected BIOS component or the operation that mishandles privileges. Exploitation requires local access without authentication and can alter protected system state and interrupt service.

CVSS severity7.9

High

EPSS probability0.15%

Next 30 days · Sep 17, 2026

Known exploitationUnconfirmed

Based on sourced intelligence

Hinoki checkNot available

Coverage for this vulnerability

See if you're affected

Explore vulnerability checks for your environment with Hinoki.

Book a demo

Summary

What happened

The record

CVE: CVE-2024-0172
Published: Apr 3, 2024
Updated: Aug 20, 2024

Vendor: Dell
Product: Dell PowerEdge XE2420 Firmware
Classifications: CWE-269, T1068

Attack vector: local
Privileges: unauthenticated

Timeline

How it unfolded

Apr 3, 2024CVE publishedPublication date reported by the CVE source.
Aug 20, 2024Record updatedLatest update available in the CVE record.

Exploitability

Present is not the same as exploitable

Compare your product and version with the public record. A matching version still requires validation against your environment.

Is a vulnerable build present?

Compare these published version ranges with your installed build and any vendor patches.

Affected versionversion=0 <2.19.0

What conditions does exploitation require?

Attack vectorlocal

Required privilegesunauthenticated

What is affected?

Dell · Dell PowerEdge XE2420 Firmwareversion=0 <2.19.0

Dell · Dell PowerEdgeversion=N/A <1.11.2; version=N/A <1.12.1; version=N/A <1.1.3; version=N/A <1.1.4; version=N/A <1.20.0; version=N/A <1.2.5; version=N/A <1.3.6; version=N/A <1.4.6; version=N/A <1.5.6; version=N/A <1.7.3; version=N/A <2.12.4; version=N/A <2.14.1; version=N/A <2.19.0; version=N/A <2.19.1

Dell · PowerEdge R6415version=0 <1.20.0

Dell · Dell PowerEdge T140 Firmwareversion=0 <2.14.1

Dell · Dell PowerEdge R7615 Firmwareversion=0 <1.4.6

Dell · PowerEdge R6625version=0 <1.4.6

Dell · Dell PowerEdge FC640 Firmwareversion=0 <2.19.1

Dell · PowerEdge R740version=0 <2.19.1

Dell · Dell PowerEdge MX750c Firmwareversion=0 <1.11.2

Dell · Dell PowerEdge T440 Firmwareversion=0 <2.19.1

Dell · Dell PowerEdge R7625 Firmwareversion=0 <1.4.6

Dell · Dell EMC Storage NX3340 Firmwareversion=0 <2.19.1

Dell · Dell PowerEdge C6525 Firmwareversion=0 <2.12.4

Dell · Dell PowerEdge R7525 Firmwareversion=0 <2.12.4

Dell · Dell PowerEdge MX740c Firmwareversion=0 <2.19.1

Dell · Dell PowerEdge XE7440 Firmwareversion=0 <2.19.0

Dell · Dell PowerEdge T340 Firmwareversion=0 <2.14.1

Dell · PowerEdge R450version=0 <1.11.2

Dell · PowerEdge R7415version=0 <1.20.0

Dell · Dell PowerEdge XR2 Firmwareversion=0 <2.19.1

Dell · Dell PowerEdge R7515 Firmwareversion=0 <2.12.4

Dell · PowerEdge R540version=0 <2.19.1

Dell · Dell PowerEdge M640 Firmwareversion=0 <2.19.1

Dell · Dell PowerEdge R860 Firmwareversion=0 <1.5.6

Dell · Dell PowerEdge XE8545 Firmwareversion=0 <2.12.4

Dell · PowerEdge R350version=0 <1.7.3

Dell · Dell PowerEdge R750xs Firmwareversion=0 <1.11.2

Dell · Dell PowerEdge T150 Firmwareversion=0 <1.7.3

Dell · PowerEdge R6515version=0 <2.12.4

Dell · Dell PowerEdge R7425 Firmwareversion=0 <1.20.0

Dell · Dell PowerEdge XE7420 Firmwareversion=0 <2.19.0

Dell · Dell PowerEdge XE8640 Firmwareversion=0 <1.2.5

Dell · PowerEdge R640version=0 <2.19.1

Dell · Dell PowerEdge T550 Firmwareversion=0 <1.11.2

Dell · PowerEdge R660xsversion=0 <1.5.6

Dell · PowerEdge R740xdversion=0 <2.19.1

Dell · Dell PowerEdge XR4510c Firmwareversion=0 <1.12.1

Dell · Dell PowerEdge R940 Firmwareversion=0 <2.19.1

Dell · PowerEdge R650version=0 <1.11.2

Dell · Dell PowerEdge XR5610 Firmwareversion=0 <1.1.4

Dell · Dell PowerEdge C6620 Firmwareversion=0 <1.5.6

Dell · Dell PowerEdge MX840c Firmwareversion=0 <2.19.1

Dell · Dell PowerEdge R940xa Firmwareversion=0 <2.19.1

Dell · PowerEdge R6525version=0 <2.12.4

Dell · PowerEdge R650XSversion=0 <1.11.2

Dell · Dell PowerEdge R960 Firmwareversion=0 <1.5.6

Dell · PowerEdge R550version=0 <1.11.2

Dell · Dell EMC XC Core XC450 Firmwareversion=0 <1.11.2

Dell · Dell EMC XC Core XC750 Firmwareversion=0 <1.11.2

Dell · Dell PowerEdge R750xa Firmwareversion=0 <1.11.2

Dell · Dell PowerEdge T560 Firmwareversion=0 <1.5.6

Dell · Dell PowerEdge R750 Firmwareversion=0 <1.11.2

Dell · Dell PowerEdge C6420 Firmwareversion=0 <2.19.1

Dell · Dell PowerEdge MX760c Firmwareversion=0 <1.5.6

Dell · Dell PowerEdge HS5620 Firmwareversion=0 <1.5.6

Dell · Dell EMC XC Core XC650 Firmwareversion=0 <1.11.2

Dell · Dell PowerEdge XR12 Firmwareversion=0 <1.11.2

Dell · Dell PowerEdge T350 Firmwareversion=0 <1.7.3

Dell · Dell PowerEdge HS5610 Firmwareversion=0 <1.5.6

Dell · Dell PowerEdge T640 Firmwareversion=0 <2.19.1

Dell · Dell PowerEdge R840 Firmwareversion=0 <2.19.1

Dell · PowerEdge R440version=0 <2.19.1

Dell · Dell PowerEdge R240 Firmwareversion=0 <2.14.1

Dell · Dell PowerEdge C6520 Firmwareversion=0 <1.11.2

Dell · Dell PowerEdge R760 Firmwareversion=0 <1.5.6

Dell · Dell EMC Storage NX3240 Firmwareversion=0 <2.19.1

Dell · Dell PowerEdge C4140 Firmwareversion=0 <2.19.1

Dell · Dell PowerEdge R250 Firmwareversion=0 <1.7.3

Dell · Dell PowerEdge R760xs Firmwareversion=0 <1.5.6

Dell · Dell PowerEdge XE9640 Firmwareversion=0 <1.3.6

Dell · Dell PowerEdge XR11 Firmwareversion=0 <1.11.2

Dell · PowerEdge R660version=0 <1.5.6

Dell · PowerEdge R6615version=0 <1.4.6

Dell · Dell PowerEdge XR7620 Firmwareversion=0 <1.5.6

Dell · Dell PowerEdge XR4520c Firmwareversion=0 <1.12.1

Dell · Dell PowerEdge XE9680 Firmwareversion=0 <1.1.3

Dell · PowerEdge R740xd2version=0 <2.19.1

Dell · Dell PowerEdge XR8620t Firmwareversion=0 <1.1.3

Dell · PowerEdge R340version=0 <2.14.1

Dell · Dell PowerEdge R760xa Firmwareversion=0 <1.1.3

Dell · Dell PowerEdge R760xd2 Firmwareversion=0 <1.5.6

Published CVSS scores

7.8NIST NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9DellCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L

CVSS describes severity. EPSS estimates exploitation probability.

Attacks

What attackers are doing with it

Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.

Daily unique IPsNo honeypot observations are available for this CVE in the selected window.

No observations available

Sep 11, 2026Sep 17, 2026

Latest reporting daySep 17, 2026

Latest daily unique IPsUnavailable

Prior 30-day averageUnavailable

SourceShadowserver honeypots (KEV)

Vectorlocal

Privilegesunauthenticated

Known exploitationUnconfirmed

Public exploitUnconfirmed

Weakness, pattern, technique

CWE-269Improper Privilege Management

T1068Exploitation for Privilege Escalation

Public exploit references

No public exploit references are available in this record.

Labels summarize the accepted research assessment. They do not indicate a test against your environment.

Technologies

Your stack

See the directory against your own environment.

Your stack

Check the software in your environment

Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.

Book a demo