Medium
Proprietary Code CVEs
|
Description
|
CVSS Base Score
|
CVSS Vector String
|
CVE-2024-38483
|
Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
|
5.8
|
Proprietary Code CVEs
|
Description
|
CVSS Base Score
|
CVSS Vector String
|
CVE-2024-38483
|
Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
|
5.8
|
Product | Software/ Firmware |
Affected Versions | Remediated Versions | Release Date (MM/DD/YYYY) | Link |
---|---|---|---|---|---|
Latitude 5290 2-in-1 | BIOS | Versions prior to 1.35.0 | Versions 1.35.0 or later | 08/08/2024 | Go to the Drivers & Downloads site for updates |
Precision 3420 Tower | BIOS | Versions prior to 2.32.0 | Versions 2.32.0 or later | 08/09/2024 | Go to the Drivers & Downloads site for updates |
Precision 3620 Tower | BIOS | Versions prior to 2.32.0 | Versions 2.32.0 or later | 08/09/2024 | Go to the Drivers & Downloads site for updates |
Wyse 7040 Thin Client | BIOS | Versions prior to 1.26.0 | Versions 1.26.0 or later | 08/09/2024 | Go to the Drivers & Downloads site for updates |
Product | Software/ Firmware |
Affected Versions | Remediated Versions | Release Date (MM/DD/YYYY) | Link |
---|---|---|---|---|---|
Latitude 5290 2-in-1 | BIOS | Versions prior to 1.35.0 | Versions 1.35.0 or later | 08/08/2024 | Go to the Drivers & Downloads site for updates |
Precision 3420 Tower | BIOS | Versions prior to 2.32.0 | Versions 2.32.0 or later | 08/09/2024 | Go to the Drivers & Downloads site for updates |
Precision 3620 Tower | BIOS | Versions prior to 2.32.0 | Versions 2.32.0 or later | 08/09/2024 | Go to the Drivers & Downloads site for updates |
Wyse 7040 Thin Client | BIOS | Versions prior to 1.26.0 | Versions 1.26.0 or later | 08/09/2024 | Go to the Drivers & Downloads site for updates |
None
Revision
|
Date
|
Description
|
1.0
|
2024-08-13
|
Initial Release
|
CVE-2024-38483: Dell Technologies would like to thank codebreaker1337 for reporting this issue.