What’s Vulnerable › Vulnerabilities

CVE-2023-32461

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-09-15 · updated 2026-06-17
• Weakness: CWE-122

Description

Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges.

Affected products

• Dell Emc Xc Core Xc450 Firmware: before 1.11.2 — fixed in 1.11.2
• Dell Emc Xc Core Xc650 Firmware: before 1.11.2 — fixed in 1.11.2
• Dell Emc Xc Core Xc6520 Firmware: before 1.11.2 — fixed in 1.11.2
• Dell Emc Xc Core Xc750 Firmware: before 1.11.2 — fixed in 1.11.2
• Dell Emc Xc Core Xc750Xa Firmware: before 1.11.2 — fixed in 1.11.2
• Dell Emc Xc Core Xc7525 Firmware: before 2.11.3 — fixed in 2.11.3
• Dell Poweredge C6520 Firmware: before 1.10.2 — fixed in 1.10.2
• Dell Poweredge C6525 Firmware: before 2.11.3 — fixed in 2.11.3
• Dell Poweredge C6620 Firmware: before 1.5.6 — fixed in 1.5.6
• Dell Poweredge Hs5610 Firmware: before 1.5.6 — fixed in 1.5.6
• Dell Poweredge Hs5620 Firmware: before 1.5.6 — fixed in 1.5.6
• Dell Poweredge Mx750C Firmware: before 1.10.2 — fixed in 1.10.2
• Dell Poweredge Mx760C Firmware: before 1.5.6 — fixed in 1.5.6
• Dell Poweredge R250 Firmware: before 1.6.3 — fixed in 1.6.3
• Dell Poweredge R350 Firmware: before 1.6.3 — fixed in 1.6.3
• Dell Poweredge R450 Firmware: before 1.10.2 — fixed in 1.10.2
• Dell Poweredge R550 Firmware: before 1.10.2 — fixed in 1.10.2
• Dell Poweredge R650 Firmware: before 1.10.2 — fixed in 1.10.2
• Dell Poweredge R650Xs Firmware: before 1.10.2 — fixed in 1.10.2
• Dell Poweredge R6515 Firmware: before 2.11.4 — fixed in 2.11.4
• Dell Poweredge R6525 Firmware: before 2.11.3 — fixed in 2.11.3
• Dell Poweredge R660 Firmware: before 1.5.6 — fixed in 1.5.6
• Dell Poweredge R660Xs Firmware: before 1.5.6 — fixed in 1.5.6
• Dell Poweredge R6615 Firmware: before 1.3.11 — fixed in 1.3.11
• Dell Poweredge R6625 Firmware: before 1.3.11 — fixed in 1.3.11
• Dell Poweredge R750 Firmware: before 1.10.2 — fixed in 1.10.2
• Dell Poweredge R750Xa Firmware: before 1.10.2 — fixed in 1.10.2
• Dell Poweredge R750Xs Firmware: before 1.10.2 — fixed in 1.10.2
• Dell Poweredge R7515 Firmware: before 2.11.4 — fixed in 2.11.4
• Dell Poweredge R7525 Firmware: before 2.11.3 — fixed in 2.11.3

How to fix

Upgrade to a fixed version: Dell Emc Xc Core Xc450 Firmware 1.11.2; Dell Emc Xc Core Xc650 Firmware 1.11.2; Dell Emc Xc Core Xc6520 Firmware 1.11.2; Dell Emc Xc Core Xc750 Firmware 1.11.2; Dell Emc Xc Core Xc750Xa Firmware 1.11.2; Dell Emc Xc Core Xc7525 Firmware 2.11.3; Dell Poweredge C6520 Firmware 1.10.2; Dell Poweredge C6525 Firmware 2.11.3; Dell Poweredge C6620 Firmware 1.5.6; Dell Poweredge Hs5610 Firmware 1.5.6; Dell Poweredge Hs5620 Firmware 1.5.6; Dell Poweredge Mx750C Firmware 1.10.2. Check the vendor advisory for mitigations.

References

• https://www.dell.com/support/kbdoc/en-us/000216543/dsa-2023-292-security-update-for-dell-poweredge-server-bios-vulnerability
• https://www.dell.com/support/kbdoc/en-us/000216543/dsa-2023-292-security-update-for-dell-poweredge-server-bios-vulnerability

Get alerted when CVE-2023-32461 or the next vulnerability affects your stack