Description
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | CPG BIOS | N/A – < 2.36.0, N/A – < 1.18.0, N/A – < 1.46.0, N/A – < 1.27.0, N/A – < 1.29.0, N/A – < 1.28.0, N/A – < 1.31.0, N/A – < 1.32.0, N/A – < 1.50.0, N/A – < 2.30.0 | 2.36.0 |
Advisories 1
- WID-SEC-2024-1122 Dell BIOS: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · May 14, 2024
References
- https://www.dell.com/support/kbdoc/en-us/000221102/dsa-2024-020 vendor-advisory