Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of service.
References
Link | Resource |
---|---|
https://www.dell.com/support/kbdoc/en-us/000225476/dsa-2024-168 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
AND |
|
Configuration 8 (hide)
AND |
|
Configuration 9 (hide)
AND |
|
Configuration 10 (hide)
AND |
|
Configuration 11 (hide)
AND |
|
Configuration 12 (hide)
AND |
|
Configuration 13 (hide)
AND |
|
Configuration 14 (hide)
AND |
|
History
18 Sep 2024, 13:04
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.dell.com/support/kbdoc/en-us/000225476/dsa-2024-168 - Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.4 |
CPE | cpe:2.3:o:dell:inspiron_16_plus_7640_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:dell:g7_7700_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:dell:inspiron_5502_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:dell:vostro_5402_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:dell:inspiron_24_5420_all-in-one:-:*:*:*:*:*:*:* cpe:2.3:h:dell:inspiron_16_7640_2-in-1:-:*:*:*:*:*:*:* cpe:2.3:h:dell:inspiron_5409:-:*:*:*:*:*:*:* cpe:2.3:h:dell:inspiron_14_plus_7440:-:*:*:*:*:*:*:* cpe:2.3:o:dell:precision_3660_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:dell:inspiron_16_7640_2-in-1_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:dell:inspiron_16_plus_7640:-:*:*:*:*:*:*:* cpe:2.3:o:dell:vostro_5502_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:dell:g7_7700:-:*:*:*:*:*:*:* cpe:2.3:h:dell:vostro_5402:-:*:*:*:*:*:*:* cpe:2.3:h:dell:inspiron_27_7720_all-in-one:-:*:*:*:*:*:*:* cpe:2.3:h:dell:g7_7500:-:*:*:*:*:*:*:* cpe:2.3:o:dell:g7_7500_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:dell:inspiron_14_plus_7440_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:dell:inspiron_5509_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:dell:precision_3660:-:*:*:*:*:*:*:* cpe:2.3:h:dell:inspiron_5502:-:*:*:*:*:*:*:* cpe:2.3:o:dell:inspiron_24_5420_all-in-one_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:dell:vostro_5502:-:*:*:*:*:*:*:* cpe:2.3:h:dell:inspiron_5509:-:*:*:*:*:*:*:* cpe:2.3:h:dell:inspiron_5402:-:*:*:*:*:*:*:* cpe:2.3:o:dell:inspiron_5402_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:dell:inspiron_5409_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:dell:inspiron_27_7720_all-in-one_firmware:*:*:*:*:*:*:*:* |
|
First Time |
Dell vostro 5402 Firmware
Dell inspiron 5409 Dell inspiron 16 7640 2-in-1 Dell inspiron 5502 Dell vostro 5502 Firmware Dell g7 7500 Firmware Dell inspiron 16 7640 2-in-1 Firmware Dell g7 7700 Firmware Dell inspiron 16 Plus 7640 Dell inspiron 5509 Dell vostro 5402 Dell inspiron 24 5420 All-in-one Dell Dell inspiron 14 Plus 7440 Dell inspiron 27 7720 All-in-one Dell g7 7500 Dell precision 3660 Firmware Dell inspiron 24 5420 All-in-one Firmware Dell inspiron 16 Plus 7640 Firmware Dell inspiron 5509 Firmware Dell precision 3660 Dell inspiron 5409 Firmware Dell g7 7700 Dell inspiron 14 Plus 7440 Firmware Dell inspiron 27 7720 All-in-one Firmware Dell vostro 5502 Dell inspiron 5402 Dell inspiron 5402 Firmware Dell inspiron 5502 Firmware |
12 Jun 2024, 07:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-06-12 07:15
Updated : 2024-09-18 13:04
NVD link : CVE-2024-28970
Mitre link : CVE-2024-28970
JSON object : View
Products Affected
dell
- inspiron_14_plus_7440_firmware
- vostro_5502
- inspiron_24_5420_all-in-one
- inspiron_5502_firmware
- inspiron_5409_firmware
- vostro_5502_firmware
- inspiron_14_plus_7440
- inspiron_27_7720_all-in-one
- inspiron_16_7640_2-in-1
- g7_7500_firmware
- inspiron_27_7720_all-in-one_firmware
- inspiron_5509
- g7_7700_firmware
- inspiron_5402_firmware
- inspiron_16_plus_7640_firmware
- vostro_5402_firmware
- precision_3660
- inspiron_16_7640_2-in-1_firmware
- vostro_5402
- inspiron_5509_firmware
- inspiron_5409
- inspiron_24_5420_all-in-one_firmware
- g7_7500
- g7_7700
- inspiron_16_plus_7640
- inspiron_5502
- precision_3660_firmware
- inspiron_5402
CWE
CWE-787
Out-of-bounds Write