CVEvulnerability

CVE-2024-28970

4.4 MEDIUM Published 2024-06-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-06-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-787

Description

Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of service.

Affected configurations

• dell vostro 5502 firmware (< 1.30.0) • dell vostro 5402 firmware (< 1.30.0) • dell precision 3660 firmware (< 2.14.0) • dell inspiron 5509 firmware (< 1.30.0) • dell inspiron 5502 firmware (< 1.30.0) • dell inspiron 5409 firmware (< 1.30.0) • dell inspiron 5402 firmware (< 1.30.0) • dell inspiron 27 7720 all-in-one firmware (< 1.11.0) • dell inspiron 24 5420 all-in-one firmware (< 1.11.0) • dell inspiron 16 plus 7640 firmware (< 1.6.0) • dell inspiron 16 7640 2-in-1 firmware (< 1.4.0) • dell inspiron 14 plus 7440 firmware (< 1.6.0) • dell g7 7700 firmware (< 1.32.0) • dell g7 7500 firmware (< 1.32.0)

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References