CVE-2024-0158: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this…

PriorityP427medium6.7CVSS 3.1

AVLACLPRHUINSUCHIHAH

EPSS

0.15%

4.4th percentile

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges

Affected

455 ranges· showing 25

Vendor	Product	Version range	Fixed in
dell	alienware_m15_r6_firmware	< 1.28.0	1.28.0
dell	alienware_m15_r7_firmware	< 1.28.0	1.28.0
dell	alienware_m16_r1_firmware	< 1.15.0	1.15.0
dell	alienware_m18_r1_firmware	< 1.15.0	1.15.0
dell	alienware_m18_r2_firmware	< 1.2.1	1.2.1
dell	alienware_x14_r2_firmware	< 1.12.1	1.12.1
dell	alienware_x16_r1_firmware	< 1.12.1	1.12.1
dell	alienware_x16_r2_firmware	< 1.2.0	1.2.0
dell	chengming_3900_firmware	< 1.20.0	1.20.0
dell	chengming_3910_firmware	< 1.12.0	1.12.0
dell	chengming_3911_firmware	< 1.12.0	1.12.0
dell	chengming_3990_firmware	< 1.26.0	1.26.0
dell	chengming_3991_firmware	< 1.26.0	1.26.0
dell	cpg_bios	>= N/A < 1.28.0	1.28.0
dell	cpg_bios	>= N/A < 1.23.0	1.23.0
dell	cpg_bios	>= N/A < 1.15.0	1.15.0
dell	cpg_bios	>= N/A < 1.2.1	1.2.1
dell	cpg_bios	>= N/A < 1.12.1	1.12.1
dell	cpg_bios	>= N/A < 1.2.0	1.2.0
dell	cpg_bios	>= N/A < 1.20.0	1.20.0
dell	cpg_bios	>= N/A < 1.12.0	1.12.0
dell	cpg_bios	>= N/A < 1.26.0	1.26.0
dell	cpg_bios	>= N/A < 1.27.0	1.27.0
dell	cpg_bios	>= N/A < 1.13.0	1.13.0
dell	cpg_bios	>= N/A < 1.29.0	1.29.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.