CVE-2024-32858

Published: Jun 13, 2024Modified: Nov 21, 2024

8.2

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability: 1.5 / Impact: 6.0

Source: NVD

Description

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

Affected (23)

Dell

23 products

Xps 8960 Firmware

Xps 8950 Firmware

Inspiron 3502 Firmware

Inspiron 15 3521 Firmware

Inspiron 15 3510 Firmware

Aurora R16 Firmware

Alienware X17 R2 Firmware

Alienware X17 R1 Firmware

Alienware X15 R2 Firmware

Alienware X15 R1 Firmware

Alienware X14 Firmware

Alienware M17 R4 Firmware

Alienware M17 R3 Firmware

Alienware M15 R4 Firmware

Alienware M15 R3 Firmware

Alienware Aurora Ryzen Edition R14 Firmware

Alienware Aurora R15 Amd Firmware

Alienware Aurora R15 Firmware

Alienware Aurora R13 Firmware

Alienware Aurora R12 Firmware

Alienware Aurora R11 Firmware

Alienware Aurora R10 Firmware

Alienware Area 51m R2 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xps 8960 Firmware	Before 2.6.0

Running on/with	Platform Versions
Dell Xps 8960	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xps 8950 Firmware	Before 1.19.0

Running on/with	Platform Versions
Dell Xps 8950	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 3502 Firmware	Before 1.16.0

Running on/with	Platform Versions
Dell Inspiron 3502	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 15 3521 Firmware	Before 1.14.0

Running on/with	Platform Versions
Dell Inspiron 15 3521	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Inspiron 15 3510 Firmware	Before 1.19.0

Running on/with	Platform Versions
Dell Inspiron 15 3510	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Aurora R16 Firmware	Before 2.7.0

Running on/with	Platform Versions
Dell Aurora R16	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware X17 R2 Firmware	Before 1.20.0

Running on/with	Platform Versions
Dell Alienware X17 R2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware X17 R1 Firmware	Before 1.22.0

Running on/with	Platform Versions
Dell Alienware X17 R1	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware X15 R2 Firmware	Before 1.20.0

Running on/with	Platform Versions
Dell Alienware X15 R2	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware X15 R1 Firmware	Before 1.22.0

Running on/with	Platform Versions
Dell Alienware X15 R1	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware X14 Firmware	Before 1.18.0

Running on/with	Platform Versions
Dell Alienware X14	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware M17 R4 Firmware	Before 1.21.0

Running on/with	Platform Versions
Dell Alienware M17 R4	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware M17 R3 Firmware	Before 1.27.0

Running on/with	Platform Versions
Dell Alienware M17 R3	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware M15 R4 Firmware	Before 1.21.0

Running on/with	Platform Versions
Dell Alienware M15 R4	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware M15 R3 Firmware	Before 1.27.0

Running on/with	Platform Versions
Dell Alienware M15 R3	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware Aurora Ryzen Edition R14 Firmware	Before 2.18.0

Running on/with	Platform Versions
Dell Alienware Aurora Ryzen Edition R14	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware Aurora R15 Amd Firmware	Before 1.13.0

Running on/with	Platform Versions
Dell Alienware Aurora R15 Amd	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware Aurora R15 Firmware	Before 1.12.0

Running on/with	Platform Versions
Dell Alienware Aurora R15	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware Aurora R13 Firmware	Before 1.19.0

Running on/with	Platform Versions
Dell Alienware Aurora R13	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware Aurora R12 Firmware	Before 1.1.25

Running on/with	Platform Versions
Dell Alienware Aurora R12	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware Aurora R11 Firmware	Before 1.0.24

Running on/with	Platform Versions
Dell Alienware Aurora R11	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware Aurora R10 Firmware	Before 2.8.0

Running on/with	Platform Versions
Dell Alienware Aurora R10	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Alienware Area 51m R2 Firmware	Before 1.26.0

Running on/with	Platform Versions
Dell Alienware Area 51m R2	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.dell.com/support/kbdoc/en-us/000223439/dsa-2024-124

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000223439/dsa-2024-124

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.