description: Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.
problem types: CWE-269: Improper Privilege Management
affected:
{
defaultStatus: unaffected
product: PowerEdge Platform
vendor: Dell
versions:
lessThan: 1.5.6, status: affected, version: N/A, versionType: semver
lessThan: 1.1.3, status: affected, version: N/A, versionType: semver
lessThan: 1.1.4, status: affected, version: N/A, versionType: semver
lessThan: 1.2.5, status: affected, version: N/A, versionType: semver
lessThan: 1.3.6, status: affected, version: N/A, versionType: semver
lessThan: 1.4.6, status: affected, version: N/A, versionType: semver
lessThan: 1.11.2, status: affected, version: N/A, versionType: semver
lessThan: 1.7.3, status: affected, version: N/A, versionType: semver
lessThan: 1.12.1, status: affected, version: N/A, versionType: semver
lessThan: 2.12.4, status: affected, version: N/A, versionType: semver
lessThan: 2.19.1, status: affected, version: N/A, versionType: semver
lessThan: 2.19.0, status: affected, version: N/A, versionType: semver
lessThan: 2.14.1, status: affected, version: N/A, versionType: semver
lessThan: 1.20.0, status: affected, version: N/A, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 7.9
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL