medium6.8
CVE-2019-3717
Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability.
Impact
Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An unauthenticated attacker with physical access to the system could potentially bypass intended Secure Boot restrictions to run unsigned and untrusted code on expansion cards installed in the system during platform boot. Refer to https://www.dell.com/support/article/us/en/04/sln317683/dsa-2019-043-dell-client-improper-access-control-vulnerability?lang=en for versions affected by this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Chengming 3967 Firmware | before 1.5.0 |
| Dell | Chengming 3977 Firmware | before 1.6.0 |
| Dell | Chengming 3980 Firmware | before 1.5.21 |
| Dell | G3 3579 Firmware | before 1.9.0 |
| Dell | G3 3779 Firmware | before 1.9.0 |
| Dell | G5 5587 Firmware | before 1.10.0 |
| Dell | G5 5590 Firmware | before 1.3.1 |
| Dell | G7 7588 Firmware | before 1.10.0 |
| Dell | G7 7590 Firmware | before 1.3.1 |
| Dell | G7 7790 Firmware | before 1.3.1 |
| Dell | Embedded Box Pc 5000 Firmware | before 1.5.6 |
| Dell | Inspiron 3153 Firmware | before 1.22.0 |