Description
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Dell Client Platform BIOS | N/A – < 1.29.0, N/A – < 1.15.0, N/A – < 1.21.0, N/A – < 1.24.0 | 1.29.0 |
Advisories 1
- WID-SEC-2024-1933 Dell BIOS: Schwachstelle ermöglicht Codeausführung und Umgehung von Sicherheitsmaßnahmen BSI CERT-Bund (WID) · Aug 27, 2024
References
- https://www.dell.com/support/kbdoc/en-us/000227594/dsa-2024-354 vendor-advisory