CVE-2024-38296

Dell Edge Gateway 3200, versions prior to 15.40.30.2879, and Edge Gateway 5200, versions prior to 12.0.94.2380, contain an Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

Score

CVSS 3.1 6.7 Medium

Status

Analyzed - security_alert@emc.com

Published

2024-11-22

Last modified

2024-12-09

Weaknesses

CWE-1421

Affected products

• Edge Gateway 5200 (Dell)
• Edge Gateway 5200 Firmware (Dell)
• Intel Management Engine Firmware Update Utility (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000250949/dsa-2024-345-security-update-for-dell-networking-edge-gateway-5200-v…