medium5.1
CVE-2024-0158
Dell BIOS contains an improper input validation vulnerability.
Impact
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware M15 R6 Firmware | before 1.28.0 |
| Dell | Alienware M15 R7 Firmware | before 1.28.0 |
| Dell | Alienware M16 R1 Firmware | before 1.15.0 |
| Dell | Alienware M18 R1 Firmware | before 1.15.0 |
| Dell | Alienware M18 R2 Firmware | before 1.2.1 |
| Dell | Alienware X14 R2 Firmware | before 1.12.1 |
| Dell | Alienware X16 R1 Firmware | before 1.12.1 |
| Dell | Alienware X16 R2 Firmware | before 1.2.0 |
| Dell | Chengming 3900 Firmware | before 1.20.0 |
| Dell | Chengming 3910 Firmware | before 1.12.0 |
| Dell | Chengming 3911 Firmware | before 1.12.0 |
| Dell | Chengming 3990 Firmware | before 1.26.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-in/000220141/dsa-2024-030-security-update-for-dell-client-bios-for-an-improper-input-validation-vulnerability
- https://www.dell.com/support/kbdoc/en-in/000220141/dsa-2024-030-security-update-for-dell-client-bios-for-an-improper-input-validation-vulnerability