high8.2
CVE-2024-39584
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability.
Impact
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Xps 8960 Firmware | before 2.12.0 |
| Dell | Xps 8950 Firmware | before 1.21.0 |
| Dell | Inspiron 3502 Firmware | before 1.18.0 |
| Dell | Inspiron 15 3521 Firmware | before 1.16.0 |
| Dell | Inspiron 15 3510 Firmware | before 1.21.0 |
| Dell | Aurora R16 Firmware | before 2.13.0 |
| Dell | Alienware X17 R2 Firmware | before 1.22.0 |
| Dell | Alienware X17 R1 Firmware | before 1.24.0 |
| Dell | Alienware X15 R2 Firmware | before 1.22.0 |
| Dell | Alienware X15 R1 Firmware | before 1.24.0 |
| Dell | Alienware X14 Firmware | before 1.21.0 |
| Dell | Alienware M17 R4 Firmware | before 1.24.0 |