CVE-2024-0158

· MEDIUMModified

← All CVEs

CVSS v3.1

5.1

EPSS

0.15%

Published

Jul 2, 2024

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L

Weaknesses (CWE)

CWE-20

Affected Products (776)

dell · alienware_m15_r6_firmware (up to 1.28.0)vulnerable

dell · alienware_m15_r6

dell · alienware_m15_r7_firmware (up to 1.28.0)vulnerable

dell · alienware_m15_r7

dell · alienware_m16_r1_firmware (up to 1.15.0)vulnerable

dell · alienware_m16_r1

dell · alienware_m18_r1_firmware (up to 1.15.0)vulnerable

References (2)

https://www.dell.com/support/kbdoc/en-in/000220141/dsa-2024-030-security-update-for-dell-client-bios-for-an-improper-input-validation-vulnerability

Vendor Advisory

https://www.dell.com/support/kbdoc/en-in/000220141/dsa-2024-030-security-update-for-dell-client-bios-for-an-improper-input-validation-vulnerability

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs