high7.5
CVE-2024-32860
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component.
Impact
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Alienware Area 51m R2 Firmware | before 1.26.0 |
| Dell | Alienware Aurora R11 Firmware | before 1.0.24 |
| Dell | Alienware Aurora R12 Firmware | before 1.1.25 |
| Dell | Alienware Aurora R13 Firmware | through 1.1.19 |
| Dell | Alienware Aurora R15 Firmware | before 1.1.12 |
| Dell | Alienware Aurora R15 Amd Firmware | before 1.13.0 |
| Dell | Alienware Aurora Ryzen Edition R14 Firmware | before 2.18.0 |
| Dell | Alienware M15 R3 Firmware | before 1.27.0 |
| Dell | Alienware M15 R4 Firmware | through 1.21.0 |
| Dell | Alienware M17 R3 Firmware | before 1.27.0 |
| Dell | Alienware M17 R4 Firmware | through 1.21.0 |
| Dell | Alienware X14 Firmware | through 1.18.0 |