Description
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | CPG BIOS | N/A – < 1.28.0, N/A – < 1.23.0, N/A – < 1.15.0, N/A – < 1.2.1, N/A – < 1.12.1, N/A – < 1.2.0, N/A – < 1.20.0, N/A – < 1.12.0, N/A – < 1.26.0, N/A – < 1.27.0, N/A – < 1.13.0, N/A – < 1.29.0, N/A – < 1.19.0, N/A – < 1.25.0, N/A – < 1.31.0, N/A – < 2.27.0, N/A – < 2.35.0, N/A – < 2.39.0, N/A – < 1.17.… | 1.28.0 |
Advisories 1
- WID-SEC-2024-0636 Dell BIOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 24, 2024