Urgent Security Patch Released for Dell Servers: CVE-2024-0172 Could Allow Hackers to Take Control

Dell has released a critical security patch addressing a severe vulnerability (CVE-2024-0172) in the BIOS software used on a wide range of its PowerEdge Server and Precision Rack systems. This flaw, rated High with a CVSS score of 7.9, could allow a local attacker without system credentials to gain elevated privileges, potentially granting them full control of a vulnerable server.

What’s Affected?

Dell has released a comprehensive list of affected server models, including those within the PowerEdge, Precision Rack, and Dell EMC Storage product lines. See the full list on Dell’s security advisory page.

Who’s at Risk?

Any organization that relies on the affected Dell server models, particularly those in sensitive environments, faces potential cyberattacks exploiting this vulnerability. Hackers could use this flaw to install malware, steal sensitive data, or disrupt critical operations.

What Happens in This Exploit?

The improper privilege management vulnerability allows a local attacker to bypass standard security checks. This means someone with even limited access to a vulnerable server could potentially execute commands, modify settings, or run malicious software at a system administrator level.

What Can You Do?

Dell strongly urges customers using affected servers to update their BIOS software immediately with the provided patches. Instructions and download links can be found on Dell’s official security advisory page.

Key Takeaways:

• Patching is essential: This incident highlights the critical role of timely software updates in maintaining cybersecurity.
• Attackers love local exploits: Vulnerabilities allowing local privilege escalation are highly desirable to threat actors as they can be a stepping stone for wider attacks.
• Review your inventory: Ensure you’re aware of what Dell servers exist within your network infrastructure and confirm they’re patched.

Additional Considerations

• Organizations may need to plan downtime for patching servers, depending on their specific operational environments.
• Consider employing network segmentation and other best practices for limiting the damage if successful exploitation occurs.