CVE-2024-38483

Published: Aug 14, 2024Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

Affected (41)

Dell

41 products

Latitude 5290 2 In 1 Firmware

Precision 3420 Tower Firmware

Precision 3620 Firmware

Wyse 7040 Thin Client Firmware

Precision 7720 Firmware

Precision 7520 Firmware

Precision 5530 2 In 1 Firmware

Precision 5520 Firmware

Precision 3520 Firmware

Optiplex 7450 All In One Firmware

Optiplex 5050 Firmware

Optiplex 3050 All In One Firmware

Optiplex 3050 Firmware

Latitude 7490 Firmware

Latitude 7480 Firmware

Latitude 7424 Rugged Extreme Firmware

Latitude 7414 Rugged Firmware

Latitude 7390 2 In 1 Firmware

Latitude 7390 Firmware

Latitude 7380 Firmware

Latitude 7290 Firmware

Latitude 7285 2 In 1 Firmware

Latitude 7280 Firmware

Latitude 7212 Rugged Extreme Tablet Firmware

Latitude 5590 Firmware

Latitude 5580 Firmware

Latitude 5490 Firmware

Latitude 5488 Firmware

Latitude 5480 Firmware

Latitude 5424 Rugged Firmware

Latitude 5420 Rugged Firmware

Latitude 5414 Rugged Firmware

Latitude 5400 Firmware

Latitude 5290 Firmware

Latitude 5288 Firmware

Latitude 5280 Firmware

Latitude 3390 2 In 1 Firmware

Latitude 3300 Firmware

Latitude 13 3380 Firmware

Latitude 12 Rugged Extreme 7214 Firmware

Embedded Box Pc 5000 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5290 2 In 1 Firmware	Before 1.35.0

Running on/with	Platform Versions
Dell Latitude 5290 2 In 1	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 3420 Tower Firmware	Before 2.32.0

Running on/with	Platform Versions
Dell Precision 3420	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 3620 Firmware	Before 2.32.0

Running on/with	Platform Versions
Dell Precision 3620 Tower	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Wyse 7040 Thin Client Firmware	Before 1.26.0

Running on/with	Platform Versions
Dell Wyse 7040 Thin Client	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 7720 Firmware	Before 1.37.0

Running on/with	Platform Versions
Dell Precision 7720	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 7520 Firmware	Version 1.37.0

Running on/with	Platform Versions
Dell Precision 7520	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 5530 2 In 1 Firmware	Before 1.32.8

Running on/with	Platform Versions
Dell Precision 5530 2 In 1	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 5520 Firmware	Before 1.39.0

Running on/with	Platform Versions
Dell Precision 5520	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Precision 3520 Firmware	Before 1.37.0

Running on/with	Platform Versions
Dell Precision 3520	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 7450 All In One Firmware	Before 1.34.0

Running on/with	Platform Versions
Dell Optiplex 7450 All In One	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 5050 Firmware	Before 1.31.0

Running on/with	Platform Versions
Dell Optiplex 5050	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 3050 All In One Firmware	Before 1.34.0

Running on/with	Platform Versions
Dell Optiplex 3050 All In One	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Optiplex 3050 Firmware	Before 1.31.0

Running on/with	Platform Versions
Dell Optiplex 3050	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7490 Firmware	Before 1.39.0

Running on/with	Platform Versions
Dell Latitude 7490	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7480 Firmware	Before 1.38.0

Running on/with	Platform Versions
Dell Latitude 7480	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7424 Rugged Extreme Firmware	Before 1.34.0

Running on/with	Platform Versions
Dell Latitude 7424 Rugged Extreme	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7414 Rugged Firmware	Before 1.47.0

Running on/with	Platform Versions
Dell Latitude 7414 Rugged	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7390 2 In 1 Firmware	Before 1.36.0

Running on/with	Platform Versions
Dell Latitude 7390 2 In 1	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7390 Firmware	Before 1.39.0

Running on/with	Platform Versions
Dell Latitude 7390	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7380 Firmware	Before 1.38.0

Running on/with	Platform Versions
Dell Latitude 7380	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7290 Firmware	Before 1.39.0

Running on/with	Platform Versions
Dell Latitude 7290	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7285 2 In 1 Firmware	Before 1.27.0

Running on/with	Platform Versions
Dell Latitude 7285 2 In 1	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7280 Firmware	Before 1.38.0

Running on/with	Platform Versions
Dell Latitude 7280	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 7212 Rugged Extreme Tablet Firmware	Before 1.51.0

Running on/with	Platform Versions
Dell Latitude 7212 Rugged Extreme Tablet	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5590 Firmware	Before 1.36.0

Running on/with	Platform Versions
Dell Latitude 5590	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5580 Firmware	Before 1.37.0

Running on/with	Platform Versions
Dell Latitude 5580	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5490 Firmware	Before 1.36.0

Running on/with	Platform Versions
Dell Latitude 5490	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5488 Firmware	Before 1.37.0

Running on/with	Platform Versions
Dell Latitude 5488	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5480 Firmware	Before 1.37.0

Running on/with	Platform Versions
Dell Latitude 5480	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5424 Rugged Firmware	Before 1.34.0

Running on/with	Platform Versions
Dell Latitude 5424 Rugged	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5420 Rugged Firmware	Before 1.34.0

Running on/with	Platform Versions
Dell Latitude 5420 Rugged	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5414 Rugged Firmware	Before 1.47.0

Running on/with	Platform Versions
Dell Latitude 5414 Rugged	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5400 Firmware	Before 1.32.0

Running on/with	Platform Versions
Dell Latitude 5400	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5290 Firmware	Before 1.36.0

Running on/with	Platform Versions
Dell Latitude 5290	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5288 Firmware	Before 1.37.0

Running on/with	Platform Versions
Dell Latitude 5288	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 5280 Firmware	Before 1.37.0

Running on/with	Platform Versions
Dell Latitude 5280	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 3390 2 In 1 Firmware	Before 1.32.0

Running on/with	Platform Versions
Dell Latitude 3390 2 In 1	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 3300 Firmware	Before 1.29.0

Running on/with	Platform Versions
Dell Latitude 3300	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 13 3380 Firmware	Before 1.28.0

Running on/with	Platform Versions
Dell Latitude 13 3380	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Latitude 12 Rugged Extreme 7214 Firmware	Before 1.47.0

Running on/with	Platform Versions
Dell Latitude 12 Rugged Extreme 7214	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Embedded Box Pc 5000 Firmware	Before 1.26.0

Running on/with	Platform Versions
Dell Embedded Box Pc 5000	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

https://www.dell.com/support/kbdoc/en-us/000225776/dsa-2024-260

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.