CVE-2024-32859
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
- Score
- CVSS 3.1 8.2 High
- Status
- Modified - security_alert@emc.com
- Published
- 2024-06-13
- Last modified
- 2024-08-02
- Weaknesses
- CWE-20
Affected products
- Alienware Area 51m R2 Firmware (Dell)
- Alienware Aurora R10 Firmware (Dell)
- Alienware Aurora R11 Firmware (Dell)
- Alienware Aurora R12 Firmware (Dell)
- Alienware Aurora R13 Firmware (Dell)
- Alienware Aurora R14 Ryzen Edition Firmware (Dell)
- Alienware Aurora R15 Amd Firmware (Dell)
- Alienware Aurora R15 Firmware (Dell)
- Alienware Aurora R16 Firmware (Dell)
- Alienware Aurora Ryzen Edition R14 Firmware (Dell)
- Alienware M15 R3 Firmware (Dell)
- Alienware M15 R4 Firmware (Dell)
- Alienware M17 R3 Firmware (Dell)
- Alienware M17 R4 Firmware (Dell)
- Alienware X14 Firmware (Dell)
- Alienware X15 R1 Firmware (Dell)
- Alienware X15 R2 Firmware (Dell)
- Alienware X17 R1 Firmware (Dell)
- Alienware X17 R2 Firmware (Dell)
- Aurora R16 Firmware (Dell)
- Cpg Bios (Dell)
- Inspiron 15 3510 Firmware (Dell)
- Inspiron 15 3521 Firmware (Dell)
- Inspiron 3502 Firmware (Dell)
- Xps 8950 Firmware (Dell)
- Xps 8960 Firmware (Dell)
References
- https://www.dell.com/support/kbdoc/en-us/000223439/dsa-2024-124
