DSA-2024-260: Security Update for Dell Client Platform BIOS for an Improper Input Validation Vulnerability
Summary: Dell Client Platform BIOS remediation is available for an Improper Input Validation vulnerability that could be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Medium
Details
|
Proprietary Code CVEs
|
Description
|
CVSS Base Score
|
CVSS Vector String
|
|
CVE-2024-38483
|
Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
|
5.8
|
|
Proprietary Code CVEs
|
Description
|
CVSS Base Score
|
CVSS Vector String
|
|
CVE-2024-38483
|
Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
|
5.8
|
Affected Products & Remediation
| Product | Software/Firmware | Affected Versions | Remediated Versions | Release Date (MM/DD/YYYY) | Link |
|---|---|---|---|---|---|
| Embedded Box PC 5000 | BIOS | Versions prior to 1.26.0 | Versions 1.26.0 or later | 08/12/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 12 Rugged Extreme 7214 | BIOS | Versions prior to 1.47.0 | Versions 1.47.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 13 3380 | BIOS | Versions prior to 1.28.0 | Versions 1.28.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3300 | BIOS | Versions prior to 1.29.0 | Versions 1.29.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3390 2-in-1 | BIOS | Versions prior to 1.32.0 | Versions 1.32.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5280 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/18/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5288 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/18/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5290 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5290 2-in-1 | BIOS | Versions prior to 1.35.0 | Versions 1.35.0 or later | 08/08/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5400 | BIOS | Versions prior to 1.32.0 | Versions 1.32.0 or later | 08/18/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5414 Rugged | BIOS | Versions prior to 1.47.0 | Versions 1.47.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5420 Rugged | BIOS | Versions prior to 1.34.0 | Versions 1.34.0 or later | 09/13/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5424 Rugged | BIOS | Versions prior to 1.34.0 | Versions 1.34.0 or later | 09/13/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5480 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/18/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5488 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/18/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5490 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5580 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/18/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5590 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7212 Rugged Extreme Tablet | BIOS | Versions prior to 1.51.0 | Versions 1.51.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7280 | BIOS | Versions prior to 1.38.0 | Versions 1.38.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7285 2-in-1 | BIOS | Versions prior to 1.27.0 | Versions 1.27.0 or later | 08/16/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7290 | BIOS | Versions prior to 1.39.0 | Versions 1.39.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7380 | BIOS | Versions prior to 1.38.0 | Versions 1.38.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7390 | BIOS | Versions prior to 1.39.0 | Versions 1.39.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7390 2-IN-1 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7414 Rugged | BIOS | Versions prior to 1.47.0 | Versions 1.47.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7424 Rugged Extreme | BIOS | Versions prior to 1.34.0 | Versions 1.34.0 or later | 09/13/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7480 | BIOS | Versions prior to 1.38.0 | Versions 1.38.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7490 | BIOS | Versions prior to 1.39.0 | Versions 1.39.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| OptiPlex 3050 | BIOS | Versions prior to 1.31.0 | Versions 1.31.0 or later | 08/16/2024 | Go to the Drivers & Downloads site for updates |
| OptiPlex 3050 All-In-One | BIOS | Versions prior to 1.34.0 | Versions 1.34.0 or later | 08/14/2024 | Go to the Drivers & Downloads site for updates |
| OptiPlex 5050 | BIOS | Versions prior to 1.31.0 | Versions 1.31.0 or later | 08/16/2024 | Go to the Drivers & Downloads site for updates |
| OptiPlex 7450 All-In-One | BIOS | Versions prior to 1.34.0 | Versions 1.34.0 or later | 08/14/2024 | Go to the Drivers & Downloads site for updates |
| Precision 3420 Tower | BIOS | Versions prior to 2.32.0 | Versions 2.32.0 or later | 08/09/2024 | Go to the Drivers & Downloads site for updates |
| Precision 3520 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/18/2024 | Go to the Drivers & Downloads site for updates |
| Precision 3620 Tower | BIOS | Versions prior to 2.32.0 | Versions 2.32.0 or later | 08/09/2024 | Go to the Drivers & Downloads site for updates |
| Precision 5520 | BIOS | Versions prior to 1.39.0 | Versions 1.39.0 or later | 08/13/2024 | Go to the Drivers & Downloads site for updates |
| Precision 5530 2-In-1 | BIOS | Versions prior to 1.32.8 | Versions 1.32.8 or later | 08/27/2024 | Go to the Drivers & Downloads site for updates |
| Precision 7520 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/13/2024 | Go to the Drivers & Downloads site for updates |
| Precision 7720 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/13/2024 | Go to the Drivers & Downloads site for updates |
| Wyse 7040 Thin Client | BIOS | Versions prior to 1.26.0 | Versions 1.26.0 or later | 08/09/2024 | Go to the Drivers & Downloads site for updates |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Release Date (MM/DD/YYYY) | Link |
|---|---|---|---|---|---|
| Embedded Box PC 5000 | BIOS | Versions prior to 1.26.0 | Versions 1.26.0 or later | 08/12/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 12 Rugged Extreme 7214 | BIOS | Versions prior to 1.47.0 | Versions 1.47.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 13 3380 | BIOS | Versions prior to 1.28.0 | Versions 1.28.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3300 | BIOS | Versions prior to 1.29.0 | Versions 1.29.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3390 2-in-1 | BIOS | Versions prior to 1.32.0 | Versions 1.32.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5280 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/18/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5288 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/18/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5290 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5290 2-in-1 | BIOS | Versions prior to 1.35.0 | Versions 1.35.0 or later | 08/08/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5400 | BIOS | Versions prior to 1.32.0 | Versions 1.32.0 or later | 08/18/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5414 Rugged | BIOS | Versions prior to 1.47.0 | Versions 1.47.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5420 Rugged | BIOS | Versions prior to 1.34.0 | Versions 1.34.0 or later | 09/13/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5424 Rugged | BIOS | Versions prior to 1.34.0 | Versions 1.34.0 or later | 09/13/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5480 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/18/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5488 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/18/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5490 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5580 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/18/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 5590 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7212 Rugged Extreme Tablet | BIOS | Versions prior to 1.51.0 | Versions 1.51.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7280 | BIOS | Versions prior to 1.38.0 | Versions 1.38.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7285 2-in-1 | BIOS | Versions prior to 1.27.0 | Versions 1.27.0 or later | 08/16/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7290 | BIOS | Versions prior to 1.39.0 | Versions 1.39.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7380 | BIOS | Versions prior to 1.38.0 | Versions 1.38.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7390 | BIOS | Versions prior to 1.39.0 | Versions 1.39.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7390 2-IN-1 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7414 Rugged | BIOS | Versions prior to 1.47.0 | Versions 1.47.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7424 Rugged Extreme | BIOS | Versions prior to 1.34.0 | Versions 1.34.0 or later | 09/13/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7480 | BIOS | Versions prior to 1.38.0 | Versions 1.38.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 7490 | BIOS | Versions prior to 1.39.0 | Versions 1.39.0 or later | 08/19/2024 | Go to the Drivers & Downloads site for updates |
| OptiPlex 3050 | BIOS | Versions prior to 1.31.0 | Versions 1.31.0 or later | 08/16/2024 | Go to the Drivers & Downloads site for updates |
| OptiPlex 3050 All-In-One | BIOS | Versions prior to 1.34.0 | Versions 1.34.0 or later | 08/14/2024 | Go to the Drivers & Downloads site for updates |
| OptiPlex 5050 | BIOS | Versions prior to 1.31.0 | Versions 1.31.0 or later | 08/16/2024 | Go to the Drivers & Downloads site for updates |
| OptiPlex 7450 All-In-One | BIOS | Versions prior to 1.34.0 | Versions 1.34.0 or later | 08/14/2024 | Go to the Drivers & Downloads site for updates |
| Precision 3420 Tower | BIOS | Versions prior to 2.32.0 | Versions 2.32.0 or later | 08/09/2024 | Go to the Drivers & Downloads site for updates |
| Precision 3520 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/18/2024 | Go to the Drivers & Downloads site for updates |
| Precision 3620 Tower | BIOS | Versions prior to 2.32.0 | Versions 2.32.0 or later | 08/09/2024 | Go to the Drivers & Downloads site for updates |
| Precision 5520 | BIOS | Versions prior to 1.39.0 | Versions 1.39.0 or later | 08/13/2024 | Go to the Drivers & Downloads site for updates |
| Precision 5530 2-In-1 | BIOS | Versions prior to 1.32.8 | Versions 1.32.8 or later | 08/27/2024 | Go to the Drivers & Downloads site for updates |
| Precision 7520 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/13/2024 | Go to the Drivers & Downloads site for updates |
| Precision 7720 | BIOS | Versions prior to 1.37.0 | Versions 1.37.0 or later | 08/13/2024 | Go to the Drivers & Downloads site for updates |
| Wyse 7040 Thin Client | BIOS | Versions prior to 1.26.0 | Versions 1.26.0 or later | 08/09/2024 | Go to the Drivers & Downloads site for updates |
Workarounds & Mitigations
None
Revision History
|
Revision
|
Date
|
Description
|
|
1.0
|
2024-08-13
|
Initial Release
|
| 2.0 | 2024-09-11 | Updated Affected Products and Remediation section: Updated Platform List |
| 3.0 | 2024-09-18 | Updated Affected Products and Remediation section: Final Platform Update |
Acknowledgements
CVE-2024-38483: Dell Technologies would like to thank codebreaker1337 for reporting this issue.
Related Information
Legal Disclaimer
Affected Products
Dell Embedded Box PC 5000, Latitude 5280/5288, Latitude 5290 2-in-1, Latitude 5290, Latitude 7212 Rugged Extreme Tablet, Latitude 7214 Rugged Extreme, Latitude 7280, Latitude 7285 2-in-1, Latitude 7290, Latitude 3300, Latitude 13 3380
, Latitude 3390 2-in-1, Latitude 7380, Latitude 7390 2-in-1, Latitude 7390, Latitude 5400, Latitude 5414 Rugged, Latitude 5420 Rugged, Latitude 5424 Rugged, Latitude 5480/5488, Latitude 5490, Latitude 7414 Rugged, Latitude 7424 Rugged Extreme, Latitude 7480, Latitude 7490, Latitude 5580, Latitude 5590, OptiPlex 3050 All-In-One, OptiPlex 3050 Tower, OptiPlex 3050 Micro, OptiPlex 3050 Small Form Factor, OptiPlex 5050 Tower, OptiPlex 5050 Micro, OptiPlex 5050 Small Form Factor, OptiPlex 7450 All-In-One, Precision 3520, Precision 5520, Precision 5530 2 in 1, Precision 7520, Precision 7720, Dell Precision Tower 3420, Dell Precision Tower 3620, Wyse 7040 Thin Client
...
Article Properties
Article Number: 000225776
Article Type: Dell Security Advisory
Last Modified: 18 Sept 2024
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.