Description
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | CPG BIOS | N/A – < 1.30.0, N/A – < 1.26.0, N/A – < 1.34.0, N/A – < 1.28.0, N/A – < 1.25.0, N/A – < 1.24.0, N/A – < 1.31.0, N/A – < 1.36.0, N/A – < 1.35.0, N/A – < 1.29.0, N/A – < 1.32.0, N/A – < 1.33.0, N/A – < 1.50.0, N/A – < 1.37.0, N/A – < 1.38.0, N/A – < 1.31.8 | 1.30.0 |
Advisories 1
- WID-SEC-2024-1438 Dell BIOS: Schwachstelle ermöglicht Manipulation von Dateien BSI CERT-Bund (WID) · Jun 24, 2024
References
- https://www.dell.com/support/kbdoc/en-us/000225627/dsa-2024-123 vendor-advisory