Skip to content
OpenAdvisories
Medium · 6.4 CVE-2024-8105 EUVD-2024-48941GHSA-5xg9-v43g-xgcj

Insecure Platform Key (PK) used in UEFI system firmware signature

Published Aug 26, 2024 · Updated Jun 28, 2026 · Assigned by certcc

Vendor: Acer Vendor: Aopen Vendor: Dell Product: alienware-13 Product: alienware-13-laptop Product: alienware-13-r2 Product: alienware-15-r4 Product: alienware-17-laptop Product: alienware-17-r2 Product: alienware-17-r3 Product: alienware-alpha Product: alienware-area51m-r2-laptop Product: alienware-aurora-r11-desktop Product: alienware-aurora-r13-desktop Product: alienware-aurora-r14-desktop Product: alienware-aurora-r15-amd-desktop Product: alienware-aurora-r15-desktop Product: alienware-aurora-r16-desktop Product: alienware-m15-r2-laptop Product: alienware-m17-r3-laptop Product: alienware-m17-r4-laptop Product: alienware-x14-r1-laptop Product: alienware-x15-r1-laptop Product: alienware-x17-r2-laptop Product: altos r680 f4 Product: altos r680s f4 Product: aspire c22-1600 Product: aspire s 27 Product: aspire s32-1856 Product: aspire xc-1710 Product: c24-1655 Product: c24-962 Product: iAPLx-DE(TAA30 TEST) Product: iKBLMUx-DER(Volta Charging) Product: inspiron-15-3502-laptop Product: inspiron-15-3510-laptop Product: inspiron-15-3521-laptop Product: inspiron-15-5552-laptop Product: inspiron-17-3782-laptop Product: inspiron-20-3059-aio Product: inspiron-22-3263-desktop-aio Product: inspiron-24-3464-aio Product: inspiron-24-5459-aio Product: inspiron-3250-small-desktop Product: inspiron-3472-desktop Product: inspiron-3662-desktop Product: inspiron-5680-gaming-desktop Product: inspiron-one-23-2330-aio Product: poweredge-c5230 Product: vostro-24-5460-aio Product: vz2694g Product: xps-8950-desktop Product: xps-8960-desktop

Description

A vulnerability exists in UEFI implementations that use a hard-coded software-based Platform Key (PK). An attacker in possession of the corresponding PK private key can sign arbitrary UEFI executables or firmware components, causing them to be trusted by affected systems and potentially bypassing UEFI Secure Boot trust validation.

Affected products

VendorProductAffectedFixed
Acer vz2694g d61d0e09d008bfb29bc32532b1b94fcc4ee2af5e8372c6d38722a4e73ecc71d6 —
Acer aspire s 27 2bd2bfaf79a72eaca45e544e5c6a5bb842b292bdc229b8975b3101a4013e0d5f —
Acer aspire s32-1856 29837e239487cc83818a7f40f9280d9692a50376487899edd603494b0f30e4c5 —
Acer aspire xc-1710 cdaa406bda1a58fbe9933622dec218a26f79871d42f0d3576fbf878e51a16201 —
Acer c24-1655 399f68dc94a6c42030efcd57fd034ff721f860b7b5d447779e7a6a6c99aba34f —
Acer aspire c22-1600 d938d08543d35d4249a51057c1d9c62bb1f6440af19913c5feffcea47dd3de95 —
Acer c24-962 3d525f96f63995c51ab1bcd2c50ebb71661ffeca9f78f97cc97e851d0e2bbbdd —
Acer altos r680 f4 a2679a9595a104d70bddc024dbc4f65f0dc9d906f30a0d1ae6b996b14246a6c2 —
Acer altos r680s f4 e5fdaabf11b236c5c7b040d674936e84db746a180ab9999317e16dcb77aeeba4 —
Aopen iAPLx-DE(TAA30 TEST) 94c6f84946db100b505af8a308f69ef6cddc2e310b50641a6e2e63bc9aed54e0 —
Aopen iKBLMUx-DER(Volta Charging) fcd339e12730f057e41ad41228f9612d4954f2d0dbcfeef37e14dcdaf2866e05 —
Dell inspiron-15-3510-laptop 7fbfd8b03d178e074572dff764f28af98c87c7556ce3837ccb8dfe993efa1940 —
Dell alienware-x17-r2-laptop 65f5939878deede2e1b24a6412ba025b78f45b1562e9d365d97e1c76a32a1832 —
Dell alienware-m17-r4-laptop f75b595b9ce5e1e25a5d64e54edffdf696251b4f4e860c0d3a03a183631f090e —
Dell alienware-x14-r1-laptop 620848eeadb74a572d6400672aecca35f46dfdc7b5152bb028fbcbf74ea7bccd —
Dell alienware-aurora-r15-amd-desktop 6348442334e85e8374884ea848685771053a7cf274ccb77559c710b5a00f61e9 —
Dell alienware-m17-r3-laptop 413a04c12bde19f1f97d9d334ed57197f0405f9f10ab7154d2b71e5471577c97 —
Dell alienware-area51m-r2-laptop 253743e7a39d0b709122c5329799f4c4608536eeb632218e7f0cbe1f6e8b5db8 —
Dell alienware-x15-r1-laptop 4fc54067f263791aed2fa4b57b226ea15c4eb0f55b3797e002bb62aa936bdd8c —
Dell inspiron-15-3521-laptop e2242e4aa3a284fcbbcf2f38a10bec24408f1eff74bb307e699ea46f483359f2 —
Dell alienware-aurora-r11-desktop 8f79d9de33f5f131226a78ccb10bb16218a5be51b2105cc32e38ceb0c8c30e9a —
Dell inspiron-15-3502-laptop 62c02a9b5a4d4328ac41c3e3aa7757e64e6c5cd52b9e047333ad18e60d17fcb6 —
Dell alienware-aurora-r13-desktop dc5912033c5ca14475f2d59ca47f25c8840f362f0c8553d13bb06a8e47c42abf —
Dell xps-8950-desktop 6982be0bd8e1aed1251fe5300eec2b515b7cab70e761cfb72074f5d658d092d9 —
Dell alienware-aurora-r15-desktop 7e310dca802db0f7a22d39bb2d7d5b79c7e9df8e5698f0e691942ec334ce5794 —
Dell alienware-aurora-r14-desktop 26a447a94e96fa8d9c590888cae490750c32d5af95faece3595f21efc41c1f2c —
Dell alienware-aurora-r16-desktop 06a9dffc8fb3edafd1b6377cf38879860a0ae3c87f97258e09d189d291f64ead —
Dell xps-8960-desktop 0dcd7494f4926fb04b56e9713f0b62eff3a345b626fa2adaf47636bf0bb4c3eb —
Dell alienware-m15-r2-laptop 69da86e9cf24c49496529f3041604a6bb1c0c0ab86c192239d31d3a9b92467cd —
Dell inspiron-17-3782-laptop 602a23f43b11817ad5439579969753866a54b836f34dfe19342e5188cf088d85 —
Dell alienware-15-r4 608e410d1c0475dac58b1e8f36b477aa8d9e9f28d30ec89d44b550e36bbbaf47 —
Dell inspiron-5680-gaming-desktop f1075841f54237735c1135ebf92baeab9c0c3f8b051229f898520f5b0f265353 —
Dell alienware-17-laptop d4ed519bd5e5ba2f027d00635494d485f19f3080d8baf6d711b190323294e216 —
Dell alienware-13-laptop cb25317443d65ba126174c8b7547c7d2f6c0288f859e2063436eb7b350d9bf62 —
Dell inspiron-3472-desktop 02877ae1ee43c787fa980d6e897e14546ac193100395bbcc6bc26fdf3077e860 —
Dell alienware-17-r3 003130dabf11c8b5df286d9584b3174faa9529cd6149513d13c7ce85d63d97b0 —
Dell alienware-13-r2 e6819bd24e063807336994f36e1b7cafbbec46c2679a365dde1b54b720a049e4 —
Dell vostro-24-5460-aio d54e560849c716d0ded4b25d9aacc746f77174cc6d3eeb3a50424eaf337c92aa —
Dell inspiron-20-3059-aio 4b4fd4cc68e48cfbacaf1279ff42ce6e9d37aa7706efffb2a0bb84fbda2aabd2 —
Dell inspiron-24-5459-aio 2c6a0bd7b3a91b9e1b309bde7d405812a42abe40001ce661252d81e7cd009650 —
Dell inspiron-22-3263-desktop-aio 13deddbbdccb6e5411317e96bdb045e28c0dcbb7e86ed5f32e5d24b4b54a5657 —
Dell inspiron-3250-small-desktop 95446bcddec63d36a9f5554815892c104febb73c676a075d789e4b7c69979fa6 —
Dell inspiron-24-3464-aio 3ffd081959db4684563f0044cca9ac16d5467a42d40913f503bad8d171bf1c99 —
Dell inspiron-3662-desktop 5a02b9214bb7ca03030323835a85efd84d369ff02a6baf9193083e2b22e8d0c3 —
Dell alienware-13 fe9e2b75babda09ba22a3e99494198e125188d9345bda2b961f10e98e6c2b784 —
Dell inspiron-one-23-2330-aio 374f19a62abe5b7c195038ebc945528046478ba7fac2b7b429edfaa47122e6e6 —
Dell alienware-17-r2 e94ccb36573d53127cfdf1f6d617c31ba8562fbdd4b43e48fe1fd52325315756 —
Dell poweredge-c5230 52dbddaf0c9803e7f9dd389519b829515abe97dc0fbd9b979230de28880f595d —
Dell alienware-alpha f1d2c02737ba96e93892f38c161b3f35fbca79a4302e439e8405d3434ed88fdb —
Dell inspiron-15-5552-laptop 73e72a45f92daa7ef76dcf82e6d13113cd9acbd2250d78d2e02232535f83fbc5 —
Dell inspiron-3646-small-desktop 081c82a0748297ca5841b1772330fb6e776c678d425789a66e3072fb73d072d7 —
Dell inspiron-24-3455-aio 2fd0f72190810fa5c4a2a3f57a7bce51dd0baa47584b59b7cba4752a92c66ee5 —
Dell vostro-20-3052-aio c4574a6a5e1e6b4f3b4a3317b51d75c3764395775f900b9ede99dca5e76849f2 —
Dell vostro-3252-small-desktop 9cc04e65928cf4852d0ae16d55808b42542387ae389ebbd3e42f888638909932 —
Dell inspiron-3655-desktop 31a7af2885146a94a82ce214a26e4dcdcfa36969aa47a7a1eaf3725fa6a2198d —
Dell inspiron-22-3265-desktop-aio 7c0c8fab8b15d6de59936a3921f85d9e79f710c6c6db6459804b679d82760e26 —
Dell inspiron-17-5755-laptop 19967c4eebd851b31936c8cab20f86008c7f065cf93217f6cc82350521cc640f —
Dell inspiron-3656-desktop a0e12007dd08b6d9a22fcc6548d0562ea3a966b2030ea9d00c739971e02b6c9a —
Dell vostro-20-3015-aio 05b03dab647098c957cadd2a66ebb1401dc5dae51f267351c0d076c239d5856b —
Formelife Studio Sys UPD a451ed9d6359fd109f495c75bab2678285265a72be64b3e5d0d5447a0e167cd5 —
Gigabyte E152-ZE1 (rev. A00) a9638651a2475403924f124552dc199689a45d2e2e59e3dea2b223667dfb63de —
Fujitsu AU47 M1 d3715136d50fc486ef59fb4aee1d7f06552fdf98423809939538fe905a1aa0b3 —
Fujitsu PRIMERGY TX100 S3p bfadb1d20541d4c39857e7b295b7ad20ce81d393f014eae27565bc173c1880c0 —
Fujitsu PRIMERGY CX270 S2 e44c2088ee54191192cc690787d74d8ddbfe3fc97c58fb2c42cf8a952784c94f —
Fujitsu PRIMERGY CX420 S1 Chassis c27a0e267f18a89c8ba8aadd37786ef8fe18162b60b45fc209bf992b570837af —
Fujitsu PRIMERGY RX100 S7p e71744d4e18cbee18a1fe381a8a83350487baa6cfbf3729d999f85d7b650610a —
Fujitsu PRIMERGY TX120 S3p 51a9197d05b1aad84546d9469b2c400bd7536eea62b2760a308e5bf84e71d74b —
Gigabyte G152-Z12 ad457250d51a0638880d9cf1df9dd029ab34b36265eda73c5459d8d0460ba3de —
Gigabyte G242-Z11 2ab6af312a78886a13144814ce766a771604755f8dd303381658026304415280 —
Gigabyte G242-Z12 eef3fd99672410b85e6342c5757723d0d3ccecef9805237955baa20780de8b4f —
Gigabyte G262-ZR0 f21b8f836105cdb4051d8bb29302dcf86836b640bf048b24f3c76e930b513b32 —
Gigabyte G292-Z20 (rev. A00) 62bb737d55f4caa082b7ea2aa6f8a59c8efdaf9d5ac5b158cbfb32a6cead8164 —
Gigabyte G292-Z43 1b6ff7d60400c7c21a5b28f947475e61abee187627c1ff12cddb25b1ce59ecb3 —
Gigabyte G292-Z45 18def9ce5aa6551c1d7e77e9f53e34701f77b89d6b32d41ea050cc94d52941e1 —
Gigabyte G482-Z50 b14d2e3fadc16c97684a4ae947798bb3a67372441dd7252568f71fc86e98ae9f —
Gigabyte G492-Z52 062e3100bfbe635c66feed863141f7a6f2bfcf0b887a5b3d7ae31fb610d17cac —
Gigabyte H252-Z12 (rev. A02) ac416150a9752dc20107bef240e73c6054af4992348003429bfd97a7373f4f27 —
Gigabyte H262-Z61 340cc5c8f4468eb2d36b684dffbf139b4ac4504b5db3993c3c1b5145858c5131 —
Gigabyte H262-Z6B 0e761b6f3c7d3a1407addf499ff848c493a9d0b0197368cbe858bbc4fa5a4702 —
Gigabyte H282-ZC0 (rev. A00) 0b739af751913ea6ff42999069963dcf6a1bdd58a3de800ab721d9bdbd59bf0d —
Gigabyte MZ32-AR0 (rev. 3.x) a4102b19258804214beb838f61699a7623cc654341e6f60ad986dae805935c14 —
Gigabyte MZ72-HB0 (rev. 3.x/4.x) e0a3837abd91821c4ad98687d2dc6456b7fcb05c8b672c48f242ffeabfa3e9b4 —
Gigabyte MZ72-HB2 (rev. 3.x) 7678e64f7728c059b228ddec74f0918f0544d5193f7b8efe0bf03e8f36c2f5c5 —
Gigabyte R162-Z10 122baff0bf1243b945a7eaa9ca55303469d624d6150d4da136d697878177f1a8 —
Gigabyte R162-ZA2 9d318d27111a3c5a2e3a6451103750d70dec9d6e9d048f7e98fcd60066b98aee —
Gigabyte R182-Z90 (rev. A00/B00/AT0) dbd77ee47e4bccbb2b8af2883765641e9d7c404937da2942637fa1b4b6d4d635 —
Gigabyte R262-ZA2 c7f73261e85bdc43932e49254cb8654ed2ce0945379592cecb081d51e5834289 —
Gigabyte R282-Z97 (rev. A00) 076310804e591d1c2d4ab1d53cff0866c04a4189e03e6964b528b8a94faa7991 —
Gigabyte S252-ZC0 8927ee41096d71b75bbef2672e22f640a22ae3588f4f44786fff92c70b861885 —
Gigabyte ME03-CE0 (rev. 1.0) 79700c28616b906f5534cf45d4582878a73f96eff24f1f894bd04b24c00eade8 —
Gigabyte ME03-PE0 (rev. 1.x) ac5ec67cafd72fd7f497c3759b0dcf359de8b7db6941120c0c69d5f3eea4bcbc —
Gigabyte ME33-AR0 (rev. 1.0) 8bdf9b526d2e9e65f23ded60745006c65678d184a258761666d3864432cc0cac —
Gigabyte R143-EG0-AAC1 630321979d80b22e20ca5fc713b2e3e1a8d9ec9ecaa6e2f814193ab8471636aa —
Gigabyte R243-E30-AAC1 ae9c0a6e84b0c2912eda99c2de4e95d45c0c8feb2a097e02832ae03c74796f50 —
Gigabyte G191-H44 28068e88e5041161f4485f958f49060d6a865e4beb0b53bafc8f3c5e5e3923b9 —
Gigabyte G241-G40 (rev. 100) 912834981a1de06dcdd4f8cfd11e7db46ac691e5ef20616d76d859e889c303be —
Gigabyte G291-2G0 (rev. 100) 0dbbb711ff0879479dc30b9a7116fb94f093e0225b74916f6b79edae90d8fb2a —
Gigabyte G591-HS0 bce2bb4589e9ba8bc8029514a887f3f3bb4ded3556bb5d77dc1a38bad564b435 —
Gigabyte H231-G20 (rev. 100/A00) 819cf98fc21e036b3ae7e6390ae09edcf6fc6c260b22bf6ede0852029ef2495b —
Gigabyte H261-H61 (rev. 100) 190d03dff0cfed20b38ae3270c8bb197b024765963dff6b7730d96bfebcbb24c —

Advisories 1

References