VDB
CNVD-2024-37419
CNVD-2024-37419
PUBLISHED
CVSS 5.800000190734863 MEDIUM
Dell BIOS是美国戴尔(Dell)公司的一个计算机主板上小型内存芯片上的嵌入式软件。 Dell BIOS存在输入验证错误漏洞,该漏洞源于存在不正确的输入验证,具有本地访问权限的高权限攻击者可利用该漏洞导致代码执行。
Risk Scores
CVSS 3.1
5.800000190734863
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| dell | wyse_7040_thin_client_firmware | 0 |
| Dell | Dell Client Platform BIOS | N/A, N/A, N/A |
| dell | precision_3620_tower_firmware | 0 |
| dell | latitude_5290_2-in-1_firmware | 0 |
| dell | precision_3420_tower_firmware | 0 |
Timeline
- Aug 13, 2024 CVE Published
- Aug 14, 2024 PoC Published
References
- https://www.dell.com/support/kbdoc/en-us/000225776/dsa-2024-260 vendor-advisory