NetSight
medium6.8

CVE-2024-0160

Dell Client Platform contains an incorrect authorization vulnerability.

Impact

Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS.

Affected products

VendorProductAffected versions
DellXps 17 9700 Firmware
before 1.30.0
DellXps 15 9500 Firmware
before 1.31.0
DellVostro 7500 Firmware
before 1.28.0
DellPrecision 5750 Firmware
before 1.30.0
DellPrecision 5550 Firmware
before 1.31.0
DellLatitude 3520 Firmware
before 1.36.0
DellLatitude 3510 Firmware
before 1.29.0
DellLatitude 3420 Firmware
before 1.36.0
DellLatitude 3410 Firmware
before 1.29.0
DellInspiron 7501 Firmware
before 1.28.0
DellInspiron 7500 Firmware
before 1.28.0
DellG7 7700 Firmware
before 1.32.0

Weakness classification

References