Description
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Dell Client Platform BIOS | N/A – < 1.29.0, N/A – < 1.19.0, N/A – < 1.25.0 | 1.29.0 |
Advisories 1
- WID-SEC-2024-3693 Dell BIOS: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Dec 12, 2024
References
- https://www.dell.com/support/kbdoc/en-us/000227595/dsa-2024-355 vendor-advisory