Description
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Metrics
CVSS 3.1 8.2/10
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Dell | CPG BIOS | >= N/A, < 2.8.0; >= N/A, < 1.0.24; >= N/A, < 1.1.25; >= N/A, < 1.19.0; >= N/A, < 1.12.0; >= N/A, < 1.13.0; >= N/A, < 2.18.0; >= N/A, < 2.7.0; >= N/A, < 1.16.0; >= N/A, < 2.6.0 |
| dell | alienware_aurora_r10_firmware | < 2.8.0 |
| dell | alienware_aurora_r11_firmware | < 1.0.24 |
| dell | alienware_aurora_r12_firmware | < 1.1.25 |
| dell | alienware_aurora_r13_firmware | < 1.19.0 |
| dell | alienware_aurora_r14_ryzen_edition_firmware | < 2.18.0 |
| dell | alienware_aurora_r15_firmware | < 1.12.0 |
| dell | alienware_aurora_r15_amd_firmware | < 1.13.0 |
| dell | alienware_aurora_r16_firmware | < 2.7.0 |
| dell | inspiron_3502_firmware | < 1.16.0 |
| dell | xps_8950_firmware | < 1.19.0 |
| dell | xps_8960_firmware | < 2.6.0 |
References
Timeline
- Published
- Jun 13, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Modified