CVE-2024-8105

MediumCVSS 6.4/10Last modified Jun 28, 2026

Description

A vulnerability exists in UEFI implementations that use a hard-coded software-based Platform Key (PK). An attacker in possession of the corresponding PK private key can sign arbitrary UEFI executables or firmware components, causing them to be trusted by affected systems and potentially bypassing UEFI Secure Boot trust validation.

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
Acervz2694g>= d61d0e09d008bfb29bc32532b1b94fcc4ee2af5e8372c6d38722a4e73ecc71d6, < 0
Aceraspire s 272bd2bfaf79a72eaca45e544e5c6a5bb842b292bdc229b8975b3101a4013e0d5f
Aceraspire s32-185629837e239487cc83818a7f40f9280d9692a50376487899edd603494b0f30e4c5
Aceraspire xc-1710cdaa406bda1a58fbe9933622dec218a26f79871d42f0d3576fbf878e51a16201
Acerc24-1655399f68dc94a6c42030efcd57fd034ff721f860b7b5d447779e7a6a6c99aba34f
Aceraspire c22-1600d938d08543d35d4249a51057c1d9c62bb1f6440af19913c5feffcea47dd3de95
Acerc24-9623d525f96f63995c51ab1bcd2c50ebb71661ffeca9f78f97cc97e851d0e2bbbdd
Aceraltos r680 f4a2679a9595a104d70bddc024dbc4f65f0dc9d906f30a0d1ae6b996b14246a6c2
Aceraltos r680s f4e5fdaabf11b236c5c7b040d674936e84db746a180ab9999317e16dcb77aeeba4
AopeniAPLx-DE(TAA30 TEST)94c6f84946db100b505af8a308f69ef6cddc2e310b50641a6e2e63bc9aed54e0
AopeniKBLMUx-DER(Volta Charging)fcd339e12730f057e41ad41228f9612d4954f2d0dbcfeef37e14dcdaf2866e05
Dellinspiron-15-3510-laptop7fbfd8b03d178e074572dff764f28af98c87c7556ce3837ccb8dfe993efa1940
Dellalienware-x17-r2-laptop65f5939878deede2e1b24a6412ba025b78f45b1562e9d365d97e1c76a32a1832
Dellalienware-m17-r4-laptopf75b595b9ce5e1e25a5d64e54edffdf696251b4f4e860c0d3a03a183631f090e
Dellalienware-x14-r1-laptop620848eeadb74a572d6400672aecca35f46dfdc7b5152bb028fbcbf74ea7bccd
Dellalienware-aurora-r15-amd-desktop6348442334e85e8374884ea848685771053a7cf274ccb77559c710b5a00f61e9
Dellalienware-m17-r3-laptop413a04c12bde19f1f97d9d334ed57197f0405f9f10ab7154d2b71e5471577c97
Dellalienware-area51m-r2-laptop253743e7a39d0b709122c5329799f4c4608536eeb632218e7f0cbe1f6e8b5db8
Dellalienware-x15-r1-laptop4fc54067f263791aed2fa4b57b226ea15c4eb0f55b3797e002bb62aa936bdd8c
Dellinspiron-15-3521-laptope2242e4aa3a284fcbbcf2f38a10bec24408f1eff74bb307e699ea46f483359f2
Dellalienware-aurora-r11-desktop8f79d9de33f5f131226a78ccb10bb16218a5be51b2105cc32e38ceb0c8c30e9a
Dellinspiron-15-3502-laptop62c02a9b5a4d4328ac41c3e3aa7757e64e6c5cd52b9e047333ad18e60d17fcb6
Dellalienware-aurora-r13-desktopdc5912033c5ca14475f2d59ca47f25c8840f362f0c8553d13bb06a8e47c42abf
Dellxps-8950-desktop6982be0bd8e1aed1251fe5300eec2b515b7cab70e761cfb72074f5d658d092d9
Dellalienware-aurora-r15-desktop7e310dca802db0f7a22d39bb2d7d5b79c7e9df8e5698f0e691942ec334ce5794
Dellalienware-aurora-r14-desktop26a447a94e96fa8d9c590888cae490750c32d5af95faece3595f21efc41c1f2c
Dellalienware-aurora-r16-desktop06a9dffc8fb3edafd1b6377cf38879860a0ae3c87f97258e09d189d291f64ead
Dellxps-8960-desktop0dcd7494f4926fb04b56e9713f0b62eff3a345b626fa2adaf47636bf0bb4c3eb
Dellalienware-m15-r2-laptop69da86e9cf24c49496529f3041604a6bb1c0c0ab86c192239d31d3a9b92467cd
Dellinspiron-17-3782-laptop602a23f43b11817ad5439579969753866a54b836f34dfe19342e5188cf088d85
Dellalienware-15-r4608e410d1c0475dac58b1e8f36b477aa8d9e9f28d30ec89d44b550e36bbbaf47
Dellinspiron-5680-gaming-desktopf1075841f54237735c1135ebf92baeab9c0c3f8b051229f898520f5b0f265353
Dellalienware-17-laptopd4ed519bd5e5ba2f027d00635494d485f19f3080d8baf6d711b190323294e216
Dellalienware-13-laptopcb25317443d65ba126174c8b7547c7d2f6c0288f859e2063436eb7b350d9bf62
Dellinspiron-3472-desktop02877ae1ee43c787fa980d6e897e14546ac193100395bbcc6bc26fdf3077e860
Dellalienware-17-r3003130dabf11c8b5df286d9584b3174faa9529cd6149513d13c7ce85d63d97b0
Dellalienware-13-r2e6819bd24e063807336994f36e1b7cafbbec46c2679a365dde1b54b720a049e4
Dellvostro-24-5460-aiod54e560849c716d0ded4b25d9aacc746f77174cc6d3eeb3a50424eaf337c92aa
Dellinspiron-20-3059-aio4b4fd4cc68e48cfbacaf1279ff42ce6e9d37aa7706efffb2a0bb84fbda2aabd2
Dellinspiron-24-5459-aio2c6a0bd7b3a91b9e1b309bde7d405812a42abe40001ce661252d81e7cd009650
Dellinspiron-22-3263-desktop-aio13deddbbdccb6e5411317e96bdb045e28c0dcbb7e86ed5f32e5d24b4b54a5657
Dellinspiron-3250-small-desktop95446bcddec63d36a9f5554815892c104febb73c676a075d789e4b7c69979fa6
Dellinspiron-24-3464-aio3ffd081959db4684563f0044cca9ac16d5467a42d40913f503bad8d171bf1c99
Dellinspiron-3662-desktop5a02b9214bb7ca03030323835a85efd84d369ff02a6baf9193083e2b22e8d0c3
Dellalienware-13fe9e2b75babda09ba22a3e99494198e125188d9345bda2b961f10e98e6c2b784
Dellinspiron-one-23-2330-aio374f19a62abe5b7c195038ebc945528046478ba7fac2b7b429edfaa47122e6e6
Dellalienware-17-r2e94ccb36573d53127cfdf1f6d617c31ba8562fbdd4b43e48fe1fd52325315756
Dellpoweredge-c523052dbddaf0c9803e7f9dd389519b829515abe97dc0fbd9b979230de28880f595d
Dellalienware-alphaf1d2c02737ba96e93892f38c161b3f35fbca79a4302e439e8405d3434ed88fdb
Dellinspiron-15-5552-laptop73e72a45f92daa7ef76dcf82e6d13113cd9acbd2250d78d2e02232535f83fbc5

References

Timeline

Published
Aug 26, 2024
Last modified
Jun 28, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-81066.5The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,CVE-2024-81075.4The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and inclCVE-2024-81085.4The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, CVE-2024-81107.5Denial of Service (DoS) vulnerability has been found in Dual-redundant Platform for Computer. If a computer on which the affected product isCVE-2024-81126.1A vulnerability was found in thinkgem JeeSite 5.3. It has been rated as problematic. This issue affects some unknown processing of the file CVE-2024-81135.4Stored XSS in organizer and event settings of pretix up to 2024.7.0 allows malicious event organizers to inject HTML tags into e-mail previeCVE-2024-81148.8An issue has been discovered in GitLab CE/EE affecting all versions from 8.12 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. ThiCVE-2024-81165.3An issue has been discovered in GitLab CE/EE affecting all versions from 16.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. By CVE-2024-81176.1The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘selected_optiCVE-2024-81185.1In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert insCVE-2024-81196.1The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the page parameterCVE-2024-81204.3The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includi