Description
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | CPG BIOS | N/A – < 2.8.0, N/A – < 1.0.24, N/A – < 1.1.25, N/A – < 1.19.0, N/A – < 1.12.0, N/A – < 1.13.0, N/A – < 2.18.0, N/A – < 2.7.0, N/A – < 1.16.0, N/A – < 2.6.0 | 2.8.0 |
Advisories 1
- WID-SEC-2024-1375 Dell BIOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 12, 2024
References
- https://www.dell.com/support/kbdoc/en-us/000223439/dsa-2024-124 vendor-advisory