Zu den Hauptinhalten
  • Bestellungen schnell und einfach aufgeben
  • Bestellungen anzeigen und den Versandstatus verfolgen
  • Profitieren Sie von exklusiven Prämien und Rabatten für Mitglieder
  • Erstellen Sie eine Liste Ihrer Produkte, auf die Sie jederzeit zugreifen können.

DSA-2024-260: Security Update for Dell Client Platform BIOS for an Improper Input Validation Vulnerability

Zusammenfassung: Dell Client Platform BIOS remediation is available for an Improper Input Validation vulnerability that could be exploited by malicious users to compromise the affected system.

Dieser Artikel gilt für   Dieser Artikel gilt nicht für 

Auswirkungen

Medium

Details

Proprietary Code CVEs
Description
CVSS Base Score
CVSS Vector String
CVE-2024-38483
Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

 
5.8
Proprietary Code CVEs
Description
CVSS Base Score
CVSS Vector String
CVE-2024-38483
Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

 
5.8
Dell Technologies empfiehlt allen Kunden, sowohl die CVSS-Gesamtbewertung als auch alle relevanten zeitlichen und umweltbezogenen Bewertungen zu berücksichtigen, die sich auf den potenziellen Schweregrad einer bestimmten Sicherheitsschwachstelle auswirken können.

Betroffene Produkte und Korrektur

Product Software/Firmware Affected Versions Remediated Versions Release Date (MM/DD/YYYY) Link
Embedded Box PC 5000 BIOS Versions prior to 1.26.0 Versions 1.26.0 or later 08/12/2024 Go to the Drivers & Downloads site for updates
Latitude 12 Rugged Extreme 7214 BIOS Versions prior to 1.47.0 Versions 1.47.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 13 3380 BIOS Versions prior to 1.28.0 Versions 1.28.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 3300 BIOS Versions prior to 1.29.0 Versions 1.29.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 3390 2-in-1 BIOS Versions prior to 1.32.0 Versions 1.32.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 5280 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/18/2024 Go to the Drivers & Downloads site for updates
Latitude 5288 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/18/2024 Go to the Drivers & Downloads site for updates
Latitude 5290 BIOS Versions prior to 1.36.0 Versions 1.36.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 5290 2-in-1 BIOS Versions prior to 1.35.0 Versions 1.35.0 or later 08/08/2024 Go to the Drivers & Downloads site for updates
Latitude 5400 BIOS Versions prior to 1.32.0 Versions 1.32.0 or later 08/18/2024 Go to the Drivers & Downloads site for updates
Latitude 5414 Rugged BIOS Versions prior to 1.47.0 Versions 1.47.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 5480 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/18/2024 Go to the Drivers & Downloads site for updates
Latitude 5488 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/18/2024 Go to the Drivers & Downloads site for updates
Latitude 5490 BIOS Versions prior to 1.36.0 Versions 1.36.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 5580 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/18/2024 Go to the Drivers & Downloads site for updates
Latitude 5590 BIOS Versions prior to 1.36.0 Versions 1.36.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7212 Rugged Extreme Tablet BIOS Versions prior to 1.51.0 Versions 1.51.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7280 BIOS Versions prior to 1.38.0 Versions 1.38.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7285 2-in-1 BIOS Versions prior to 1.27.0 Versions 1.27.0 or later 08/16/2024 Go to the Drivers & Downloads site for updates
Latitude 7290 BIOS Versions prior to 1.39.0 Versions 1.39.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7380 BIOS Versions prior to 1.38.0 Versions 1.38.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7390 BIOS Versions prior to 1.39.0 Versions 1.39.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7390 2-IN-1 BIOS Versions prior to 1.36.0 Versions 1.36.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7414 Rugged BIOS Versions prior to 1.47.0 Versions 1.47.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7480 BIOS Versions prior to 1.38.0 Versions 1.38.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7490 BIOS Versions prior to 1.39.0 Versions 1.39.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
OptiPlex 3050 BIOS Versions prior to 1.31.0 Versions 1.31.0 or later 08/16/2024 Go to the Drivers & Downloads site for updates
OptiPlex 3050 All-In-One BIOS Versions prior to 1.34.0 Versions 1.34.0 or later 08/14/2024 Go to the Drivers & Downloads site for updates
OptiPlex 5050 BIOS Versions prior to 1.31.0 Versions 1.31.0 or later 08/16/2024 Go to the Drivers & Downloads site for updates
OptiPlex 7450 All-In-One BIOS Versions prior to 1.34.0 Versions 1.34.0 or later 08/14/2024 Go to the Drivers & Downloads site for updates
Precision 3420 Tower BIOS Versions prior to 2.32.0 Versions 2.32.0 or later 08/09/2024 Go to the Drivers & Downloads site for updates
Precision 3520 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/18/2024 Go to the Drivers & Downloads site for updates
Precision 3620 Tower BIOS Versions prior to 2.32.0 Versions 2.32.0 or later 08/09/2024 Go to the Drivers & Downloads site for updates
Precision 5520 BIOS Versions prior to 1.39.0 Versions 1.39.0 or later 08/13/2024 Go to the Drivers & Downloads site for updates
Precision 5530 2-In-1 BIOS Versions prior to 1.32.8 Versions 1.32.8 or later 08/27/2024 Go to the Drivers & Downloads site for updates
Precision 7520 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/13/2024 Go to the Drivers & Downloads site for updates
Precision 7720 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/13/2024 Go to the Drivers & Downloads site for updates
Wyse 7040 Thin Client BIOS Versions prior to 1.26.0 Versions 1.26.0 or later 08/09/2024 Go to the Drivers & Downloads site for updates
Product Software/Firmware Affected Versions Remediated Versions Release Date (MM/DD/YYYY) Link
Embedded Box PC 5000 BIOS Versions prior to 1.26.0 Versions 1.26.0 or later 08/12/2024 Go to the Drivers & Downloads site for updates
Latitude 12 Rugged Extreme 7214 BIOS Versions prior to 1.47.0 Versions 1.47.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 13 3380 BIOS Versions prior to 1.28.0 Versions 1.28.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 3300 BIOS Versions prior to 1.29.0 Versions 1.29.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 3390 2-in-1 BIOS Versions prior to 1.32.0 Versions 1.32.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 5280 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/18/2024 Go to the Drivers & Downloads site for updates
Latitude 5288 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/18/2024 Go to the Drivers & Downloads site for updates
Latitude 5290 BIOS Versions prior to 1.36.0 Versions 1.36.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 5290 2-in-1 BIOS Versions prior to 1.35.0 Versions 1.35.0 or later 08/08/2024 Go to the Drivers & Downloads site for updates
Latitude 5400 BIOS Versions prior to 1.32.0 Versions 1.32.0 or later 08/18/2024 Go to the Drivers & Downloads site for updates
Latitude 5414 Rugged BIOS Versions prior to 1.47.0 Versions 1.47.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 5480 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/18/2024 Go to the Drivers & Downloads site for updates
Latitude 5488 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/18/2024 Go to the Drivers & Downloads site for updates
Latitude 5490 BIOS Versions prior to 1.36.0 Versions 1.36.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 5580 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/18/2024 Go to the Drivers & Downloads site for updates
Latitude 5590 BIOS Versions prior to 1.36.0 Versions 1.36.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7212 Rugged Extreme Tablet BIOS Versions prior to 1.51.0 Versions 1.51.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7280 BIOS Versions prior to 1.38.0 Versions 1.38.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7285 2-in-1 BIOS Versions prior to 1.27.0 Versions 1.27.0 or later 08/16/2024 Go to the Drivers & Downloads site for updates
Latitude 7290 BIOS Versions prior to 1.39.0 Versions 1.39.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7380 BIOS Versions prior to 1.38.0 Versions 1.38.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7390 BIOS Versions prior to 1.39.0 Versions 1.39.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7390 2-IN-1 BIOS Versions prior to 1.36.0 Versions 1.36.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7414 Rugged BIOS Versions prior to 1.47.0 Versions 1.47.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7480 BIOS Versions prior to 1.38.0 Versions 1.38.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
Latitude 7490 BIOS Versions prior to 1.39.0 Versions 1.39.0 or later 08/19/2024 Go to the Drivers & Downloads site for updates
OptiPlex 3050 BIOS Versions prior to 1.31.0 Versions 1.31.0 or later 08/16/2024 Go to the Drivers & Downloads site for updates
OptiPlex 3050 All-In-One BIOS Versions prior to 1.34.0 Versions 1.34.0 or later 08/14/2024 Go to the Drivers & Downloads site for updates
OptiPlex 5050 BIOS Versions prior to 1.31.0 Versions 1.31.0 or later 08/16/2024 Go to the Drivers & Downloads site for updates
OptiPlex 7450 All-In-One BIOS Versions prior to 1.34.0 Versions 1.34.0 or later 08/14/2024 Go to the Drivers & Downloads site for updates
Precision 3420 Tower BIOS Versions prior to 2.32.0 Versions 2.32.0 or later 08/09/2024 Go to the Drivers & Downloads site for updates
Precision 3520 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/18/2024 Go to the Drivers & Downloads site for updates
Precision 3620 Tower BIOS Versions prior to 2.32.0 Versions 2.32.0 or later 08/09/2024 Go to the Drivers & Downloads site for updates
Precision 5520 BIOS Versions prior to 1.39.0 Versions 1.39.0 or later 08/13/2024 Go to the Drivers & Downloads site for updates
Precision 5530 2-In-1 BIOS Versions prior to 1.32.8 Versions 1.32.8 or later 08/27/2024 Go to the Drivers & Downloads site for updates
Precision 7520 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/13/2024 Go to the Drivers & Downloads site for updates
Precision 7720 BIOS Versions prior to 1.37.0 Versions 1.37.0 or later 08/13/2024 Go to the Drivers & Downloads site for updates
Wyse 7040 Thin Client BIOS Versions prior to 1.26.0 Versions 1.26.0 or later 08/09/2024 Go to the Drivers & Downloads site for updates

Workarounds und Korrekturmaßnahmen

None

Revisionsverlauf

Revision
Date
Description
1.0
2024-08-13
Initial Release
2.02024-09-11Updated Affected Products and Remediation section:  Updated Platform List

Danksagung

CVE-2024-38483: Dell Technologies would like to thank codebreaker1337 for reporting this issue.
 

Zugehörige Informationen

Betroffene Produkte

Dell Embedded Box PC 5000, Latitude 5280/5288, Latitude 5290 2-in-1, Latitude 5290, Latitude 7212 Rugged Extreme Tablet, Latitude 7214 Rugged Extreme, Latitude 7280, Latitude 7285 2-in-1, Latitude 7290, Latitude 3300, Latitude 13 3380 , Latitude 3390 2-in-1, Latitude 7380, Latitude 7390 2-in-1, Latitude 7390, Latitude 5400, Latitude 5414 Rugged, Latitude 5480/5488, Latitude 5490, Latitude 7414 Rugged, Latitude 7480, Latitude 7490, Latitude 5580, Latitude 5590, OptiPlex 3050 All-In-One, OptiPlex 3050 Tower, OptiPlex 3050 Micro, OptiPlex 3050 Small Form Factor, OptiPlex 5050 Tower, OptiPlex 5050 Micro, OptiPlex 5050 Small Form Factor, OptiPlex 7450 All-In-One, Precision 3520, Precision 5520, Precision 5530 2 in 1, Precision 7520, Precision 7720, Dell Precision Tower 3420, Dell Precision Tower 3620, Wyse 7040 Thin Client ...