DSA-2024-354: Security Update for a Dell Client Platform BIOS for a Use of Default Cryptographic Key Vulnerability
Zusammenfassung: Dell Client Platform BIOS remediation is available for a Use of Default Cryptographic Key vulnerability that could be exploited by malicious users to compromise the affected system.
Dieser Artikel gilt für
Dieser Artikel gilt nicht für
Dieser Artikel ist nicht an ein bestimmtes Produkt gebunden.
In diesem Artikel werden nicht alle Produktversionen aufgeführt.
Auswirkungen
High
Details
|
Proprietary Code CVEs
|
Description
|
CVSS Base Score
|
CVSS Vector String
|
|---|---|---|---|
|
CVE-2024-39584
|
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.
|
8.2
|
|
Proprietary Code CVEs
|
Description
|
CVSS Base Score
|
CVSS Vector String
|
|---|---|---|---|
|
CVE-2024-39584
|
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.
|
8.2
|
Betroffene Produkte und Korrektur
| Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Release Date (MM/DD/YYYY) |
Link |
| Alienware Area 51m R2 |
BIOS |
Versions prior to 1.29.0 |
Versions 1.29.0 or later |
08/27/2024 |
|
| Alienware Aurora R13 |
BIOS |
Versions prior to 1.21.0 |
Versions 1.21.0 or later |
09/06/2024 |
|
| Alienware Aurora R15 |
BIOS |
Versions prior to 1.17.0 |
Versions 1.17.0 or later |
10/22/2024 |
|
| Alienware Aurora R15 AMD |
BIOS |
Versions prior to 1.15.0 |
Versions 1.15.0 or later |
08/27/2024 |
|
| Alienware Aurora Ryzen Edition R14 |
BIOS |
Versions prior to 2.19.1 |
Versions 2.19.1 or later |
09/06/2024 |
|
| Alienware m15 R3 |
BIOS |
Versions prior to 1.29.0 |
Versions 1.29.0 or later |
08/27/2024 |
|
| Alienware m15 R4 |
BIOS |
Versions prior to 1.24.0 |
Versions 1.24.0 or later |
08/28/2024 |
|
| Alienware m17 R3 |
BIOS |
Versions prior to 1.29.0 |
Versions 1.29.0 or later |
08/27/2024 |
|
| Alienware m17 R4 |
BIOS |
Versions prior to 1.24.0 |
Versions 1.24.0 or later |
08/28/2024 |
|
| Alienware x14 |
BIOS |
Versions prior to 1.21.0 |
Versions 1.21.0 or later |
08/27/2024 |
|
| Alienware x15 R1 |
BIOS |
Versions prior to 1.24.0 |
Versions 1.24.0 or later |
08/27/2024 |
|
| Alienware x15 R2 |
BIOS |
Versions prior to 1.22.0 |
Versions 1.22.0 or later |
08/28/2024 |
|
| Alienware x17 R1 |
BIOS |
Versions prior to 1.24.0 |
Versions 1.24.0 or later |
08/27/2024 |
|
| Alienware x17 R2 |
BIOS |
Versions prior to 1.22.0 |
Versions 1.22.0 or later |
08/28/2024 |
|
| AURORA R16 |
BIOS |
Versions prior to 2.13.0 |
Versions 2.13.0 or later |
10/22/2024 |
|
| Inspiron 15 3510 |
BIOS |
Versions prior to 1.21.0 |
Versions 1.21.0 or later |
09/12/2024 |
|
| Inspiron 15 3521 |
BIOS |
Versions prior to 1.16.0 |
Versions 1.16.0 or later |
09/11/2024 |
|
| Inspiron 3502 |
BIOS |
Versions prior to 1.18.0 |
Versions 1.18.0 or later |
09/12/2024 |
|
| XPS 8950 |
BIOS |
Versions prior to 1.21.0 |
Versions 1.21.0 or later |
09/06/2024 |
|
| XPS 8960 |
BIOS |
Versions prior to 2.12.0 |
Versions 2.12.0 or later |
10/22/2024 |
| Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Release Date (MM/DD/YYYY) |
Link |
| Alienware Area 51m R2 |
BIOS |
Versions prior to 1.29.0 |
Versions 1.29.0 or later |
08/27/2024 |
|
| Alienware Aurora R13 |
BIOS |
Versions prior to 1.21.0 |
Versions 1.21.0 or later |
09/06/2024 |
|
| Alienware Aurora R15 |
BIOS |
Versions prior to 1.17.0 |
Versions 1.17.0 or later |
10/22/2024 |
|
| Alienware Aurora R15 AMD |
BIOS |
Versions prior to 1.15.0 |
Versions 1.15.0 or later |
08/27/2024 |
|
| Alienware Aurora Ryzen Edition R14 |
BIOS |
Versions prior to 2.19.1 |
Versions 2.19.1 or later |
09/06/2024 |
|
| Alienware m15 R3 |
BIOS |
Versions prior to 1.29.0 |
Versions 1.29.0 or later |
08/27/2024 |
|
| Alienware m15 R4 |
BIOS |
Versions prior to 1.24.0 |
Versions 1.24.0 or later |
08/28/2024 |
|
| Alienware m17 R3 |
BIOS |
Versions prior to 1.29.0 |
Versions 1.29.0 or later |
08/27/2024 |
|
| Alienware m17 R4 |
BIOS |
Versions prior to 1.24.0 |
Versions 1.24.0 or later |
08/28/2024 |
|
| Alienware x14 |
BIOS |
Versions prior to 1.21.0 |
Versions 1.21.0 or later |
08/27/2024 |
|
| Alienware x15 R1 |
BIOS |
Versions prior to 1.24.0 |
Versions 1.24.0 or later |
08/27/2024 |
|
| Alienware x15 R2 |
BIOS |
Versions prior to 1.22.0 |
Versions 1.22.0 or later |
08/28/2024 |
|
| Alienware x17 R1 |
BIOS |
Versions prior to 1.24.0 |
Versions 1.24.0 or later |
08/27/2024 |
|
| Alienware x17 R2 |
BIOS |
Versions prior to 1.22.0 |
Versions 1.22.0 or later |
08/28/2024 |
|
| AURORA R16 |
BIOS |
Versions prior to 2.13.0 |
Versions 2.13.0 or later |
10/22/2024 |
|
| Inspiron 15 3510 |
BIOS |
Versions prior to 1.21.0 |
Versions 1.21.0 or later |
09/12/2024 |
|
| Inspiron 15 3521 |
BIOS |
Versions prior to 1.16.0 |
Versions 1.16.0 or later |
09/11/2024 |
|
| Inspiron 3502 |
BIOS |
Versions prior to 1.18.0 |
Versions 1.18.0 or later |
09/12/2024 |
|
| XPS 8950 |
BIOS |
Versions prior to 1.21.0 |
Versions 1.21.0 or later |
09/06/2024 |
|
| XPS 8960 |
BIOS |
Versions prior to 2.12.0 |
Versions 2.12.0 or later |
10/22/2024 |
Workarounds und Korrekturmaßnahmen
None
Revisionsverlauf
|
Revision
|
Date
|
Description
|
|---|---|---|
|
1.0
|
2024-08-27
|
Initial Release
|
| 2.0 | 2024-08-28 | Updated Affected Products and Remediation Section: Platform List Update |
| 3.0 | 2024-09-11 | Updated Affected Products and Remediation Section: Platform List Update |
| 4.0 | 2024-09-18 | Updated Affected Products and Remediation Section: Platform List Update |
| 5.0 | 2024-10-24 | Updated Affected Products and Remediation Section: Final Platform List Update |
Danksagung
CVE-2024-39584: Dell Technologies would like to thank BINARLY REsearch team for reporting this issue.
Zugehörige Informationen
Rechtlicher Hinweis
Betroffene Produkte
Alienware Area-51m R2, Alienware Aurora R13, Alienware Aurora Ryzen Edition R14, Alienware Aurora R15 AMD, Alienware Aurora R15, Alienware Aurora R16, Alienware M15 R3, Alienware m15 R4, Alienware M17 R3, Alienware m17 R4, Alienware x14
, Alienware x15 R1, Alienware x15 R2, Alienware x17 R1, Alienware x17 R2, Alienware x14, Inspiron 3502, Inspiron 15 3510, Inspiron 15 3521, XPS 8950, XPS 8960
...
Artikeleigenschaften
Artikelnummer: 000227594
Artikeltyp: Dell Security Advisory
Zuletzt geändert: 24 Okt. 2024
Antworten auf Ihre Fragen erhalten Sie von anderen Dell NutzerInnen
Support Services
Prüfen Sie, ob Ihr Gerät durch Support Services abgedeckt ist.