Search/CVE-2024-38483
● CVE — Medium

CVE-2024-38483

VendordellProductlatitude 5290 2-in-1 firmware, latitude 7212 rugged extreme tablet firmware, latitude 7280 firmware, latitude 7290 firmware, latitude 7380 firmware, latitude 7390 2-in-1 firmware, latitude 7390 firmware, latitude 7480 firmware, latitude 7490 firmware, precision 5520 firmware, precision 5530 2-in-1 firmware, latitude 5590 firmware, latitude 7285 2-in-1 firmware, latitude 7414 rugged firmware, latitude 7424 rugged extreme firmware, optiplex 3050 all-in-one firmware, optiplex 3050 firmware, optiplex 5050 firmware, optiplex 7450 all-in-one firmware, precision 3420 tower firmware, precision 3520 firmware, precision 3620 firmware, precision 7520 firmware, precision 7720 firmware, wyse 7040 thin client firmwareDiscoveredAug 14, 2024UpdatedSep 18, 2024

Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

CVSS v3.1
5.8 MEDIUM
EPSS
0.15%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityHIGH
Privileges RequiredHIGH
User InteractionREQUIRED
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityLOW
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L
Connections
26 relationships
Timeline
disclosure → media coverage
Aug 14, 2024
Disclosure — published as a CVE record. · last revised by NVD Sep 18, 2024