CVE-2024-22429

Published: May 17, 2024Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.

Affected (50)

Dell

50 products

Edge Gateway 5000 Firmware

Precision 5820 Tower Firmware

Edge Gateway 3000 Firmware

Embedded Box Pc 3000 Firmware

Embedded Box Pc 5000 Firmware

Latitude 12 Rugged Extreme 7214 Firmware

Latitude 13 3380 Firmware

Latitude 3180 Firmware

Latitude 3189 Firmware

Latitude 3190 Firmware

Latitude 3190 2 In 1 Firmware

Latitude 3300 Firmware

Latitude 3390 2 In 1 Firmware

Latitude 5280 Firmware

Latitude 5288 Firmware

Latitude 5290 Firmware

Latitude 5290 2 In 1 Firmware

Latitude 5400 Firmware

Latitude 5414 Rugged Firmware

Latitude 5420 Rugged Firmware

Latitude 5424 Rugged Firmware

Latitude 5480 Firmware

Latitude 5488 Firmware

Latitude 5490 Firmware

Latitude 5580 Firmware

Latitude 5590 Firmware

Latitude 7212 Rugged Extreme Tablet Firmware

Latitude 7280 Firmware

Latitude 7285 2 In 1 Firmware

Latitude 7290 Firmware

Latitude 7380 Firmware

Latitude 7390 Firmware

Latitude 7390 2 In 1 Firmware

Latitude 7414 Rugged Firmware

Latitude 7424 Rugged Extreme Firmware

Latitude 7480 Firmware

Latitude 7490 Firmware

Optiplex 3050 Firmware

Optiplex 3050 All In One Firmware

Optiplex 5050 Firmware

Optiplex 7450 All In One Firmware

Precision 3420 Tower Firmware

Precision 3520 Firmware

Precision 3620 Tower Firmware

Precision 5520 Firmware

Precision 5530 2 In 1 Firmware

Precision 7520 Firmware

Precision 7720 Firmware

Wyse 5070 Firmware

Wyse 7040 Thin Client Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Edge Gateway 5000 Firmware	Before 1.28.0

Running on/with	Platform Versions
Dell Edge Gateway 5000	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 5820 Tower Firmware	Before 2.36.0

Running on/with	Platform Versions
Dell Precision 5820 Tower	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Edge Gateway 3000 Firmware	Before 1.18.0

Running on/with	Platform Versions
Dell Edge Gateway 3000	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Embedded Box Pc 3000 Firmware	Before 1.24.0

Running on/with	Platform Versions
Dell Embedded Box Pc 3000	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Embedded Box Pc 5000 Firmware	Before 1.25.0

Running on/with	Platform Versions
Dell Embedded Box Pc 5000	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 12 Rugged Extreme 7214 Firmware	Before 1.46.0

Running on/with	Platform Versions
Dell Latitude 12 Rugged Extreme 7214	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 13 3380 Firmware	Before 1.27.0

Running on/with	Platform Versions
Dell Latitude 13 3380	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 3180 Firmware	Before 1.29.0

Running on/with	Platform Versions
Dell Latitude 3180	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 3189 Firmware	Before 1.29.0

Running on/with	Platform Versions
Dell Latitude 3189	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 3190 Firmware	Before 1.34.0

Running on/with	Platform Versions
Dell Latitude 3190	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 3190 2 In 1 Firmware	Before 1.34.0

Running on/with	Platform Versions
Dell Latitude 3190 2 In 1	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 3300 Firmware	Before 1.28.0

Running on/with	Platform Versions
Dell Latitude 3300	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 3390 2 In 1 Firmware	Before 1.31.0

Running on/with	Platform Versions
Dell Latitude 3390 2 In 1	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5280 Firmware	Before 1.36.0

Running on/with	Platform Versions
Dell Latitude 5280	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5288 Firmware	Before 1.36.0

Running on/with	Platform Versions
Dell Latitude 5288	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5290 Firmware	Before 1.35.0

Running on/with	Platform Versions
Dell Latitude 5290	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5290 2 In 1 Firmware	Before 1.34.0

Running on/with	Platform Versions
Dell Latitude 5290 2 In 1	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5400 Firmware	Before 1.30.0

Running on/with	Platform Versions
Dell Latitude 5400	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5414 Rugged Firmware	Before 1.46.0

Running on/with	Platform Versions
Dell Latitude 5414 Rugged	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5420 Rugged Firmware	Before 1.32.0

Running on/with	Platform Versions
Dell Latitude 5420 Rugged	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5424 Rugged Firmware	Before 1.32.0

Running on/with	Platform Versions
Dell Latitude 5424 Rugged	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5480 Firmware	Before 1.36.0

Running on/with	Platform Versions
Dell Latitude 5480	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5488 Firmware	Before 1.36.0

Running on/with	Platform Versions
Dell Latitude 5488	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5490 Firmware	Before 1.35.0

Running on/with	Platform Versions
Dell Latitude 5490	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5580 Firmware	Before 1.36.0

Running on/with	Platform Versions
Dell Latitude 5580	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5590 Firmware	Before 1.35.0

Running on/with	Platform Versions
Dell Latitude 5590	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7212 Rugged Extreme Tablet Firmware	Before 1.50.0

Running on/with	Platform Versions
Dell Latitude 7212 Rugged Extreme Tablet	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7280 Firmware	Before 1.37.0

Running on/with	Platform Versions
Dell Latitude 7280	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7285 2 In 1 Firmware	Before 1.26.0

Running on/with	Platform Versions
Dell Latitude 7285 2 In 1	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7290 Firmware	Before 1.38.0

Running on/with	Platform Versions
Dell Latitude 7290	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7380 Firmware	Before 1.37.0

Running on/with	Platform Versions
Dell Latitude 7380	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7390 Firmware	Before 1.38.0

Running on/with	Platform Versions
Dell Latitude 7390	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7390 2 In 1 Firmware	Before 1.35.0

Running on/with	Platform Versions
Dell Latitude 7390 2 In 1	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7414 Rugged Firmware	Before 1.46.0

Running on/with	Platform Versions
Dell Latitude 7414 Rugged	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7424 Rugged Extreme Firmware	Before 1.32.0

Running on/with	Platform Versions
Dell Latitude 7424 Rugged Extreme	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7480 Firmware	Before 1.37.0

Running on/with	Platform Versions
Dell Latitude 7480	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7490 Firmware	Before 1.38.0

Running on/with	Platform Versions
Dell Latitude 7490	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 3050 Firmware	Before 1.30.0

Running on/with	Platform Versions
Dell Optiplex 3050	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 3050 All In One Firmware	Before 1.32.0

Running on/with	Platform Versions
Dell Optiplex 3050 All In One	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 5050 Firmware	Before 1.30.0

Running on/with	Platform Versions
Dell Optiplex 5050	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 7450 All In One Firmware	Before 1.32.0

Running on/with	Platform Versions
Dell Optiplex 7450 All In One	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 3420 Tower Firmware	Before 2.30.0

Running on/with	Platform Versions
Dell Precision 3420 Tower	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 3520 Firmware	Before 1.36.0

Running on/with	Platform Versions
Dell Precision 3520	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 3620 Tower Firmware	Before 2.30.0

Running on/with	Platform Versions
Dell Precision 3620 Tower	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 5520 Firmware	Before 1.38.0

Running on/with	Platform Versions
Dell Precision 5520	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 5530 2 In 1 Firmware	Before 1.31.8

Running on/with	Platform Versions
Dell Precision 5530 2 In 1	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 7520 Firmware	Before 1.36.0

Running on/with	Platform Versions
Dell Precision 7520	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 7720 Firmware	Before 1.36.0

Running on/with	Platform Versions
Dell Precision 7720	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Wyse 5070 Firmware	Before 1.31.0

Running on/with	Platform Versions
Dell Wyse 5070	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Wyse 7040 Thin Client Firmware	Before 1.25.0

Running on/with	Platform Versions
Dell Wyse 7040 Thin Client	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.dell.com/support/kbdoc/en-us/000221102/dsa-2024-020

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000221102/dsa-2024-020

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.