CVE-2024-32856

MediumCVSS 6.0/10Last modified Jun 17, 2026

Description

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

Metrics

CVSS 3.1 6.0/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Dell	CPG BIOS	>= N/A, < 2.8.0; >= N/A, < 1.0.24; >= N/A, < 1.1.25; >= N/A, < 1.19.0; >= N/A, < 1.12.0; >= N/A, < 1.13.0; >= N/A, < 2.18.0; >= N/A, < 2.7.0; >= N/A, < 1.16.0

References

https://www.dell.com/support/kbdoc/en-us/000221745/dsa-2024-067Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000221745/dsa-2024-067Vendor Advisory

Timeline

Published: Jun 13, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-328577.8Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially CVE-2024-328588.2Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attack CVE-2024-328598.2Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attack CVE-2024-32867.5A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart CVE-2024-328608.2Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attack CVE-2024-328617.8Under certain circumstances the impacted Software House C•CURE 9000 installer will utilize unnecessarily wide permissions.CVE-2024-328628.1Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.CVE-2024-328638.8Under certain circumstances the exacqVision Web Services may be susceptible to Cross-Site Request Forgery (CSRF)CVE-2024-328648.1Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS)CVE-2024-328657.3Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices.CVE-2024-328668.6Conform, a type-safe form validation library, allows the parsing of nested objects in the form of `object.property`. Due to an improper impl CVE-2024-328675.3Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0