CVE-2024-39584

Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.

• dell xps 8960 firmware (< 2.12.0) • dell xps 8950 firmware (< 1.21.0) • dell inspiron 3502 firmware (< 1.18.0) • dell inspiron 15 3521 firmware (< 1.16.0) • dell inspiron 15 3510 firmware (< 1.21.0) • dell aurora r16 firmware (< 2.13.0) • dell alienware x17 r2 firmware (< 1.22.0) • dell alienware x17 r1 firmware (< 1.24.0) • dell alienware x15 r2 firmware (< 1.22.0) • dell alienware x15 r1 firmware (< 1.24.0) • dell alienware x14 firmware (< 1.21.0) • dell alienware m17 r4 firmware (< 1.24.0) • dell alienware m17 r3 firmware (< 1.29.0) • dell alienware m15 r4 firmware (< 1.24.0) • dell alienware m15 r3 firmware (< 1.29.0) • dell alienware aurora ryzen edition r14 firmware (< 2.19.1) • dell alienware aurora r15 amd firmware (< 1.15.0) • dell alienware aurora r15 firmware (< 1.17.0) • dell alienware aurora r13 firmware (< 1.21.0) • dell alienware area 51m r2 firmware (< 1.29.0)