CVE-2024-0158

published 2024-07-02

CVE-2024-0158: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges

Affected

455 ranges · showing 25

Vendor	Product	Version range	Fixed in
dell	alienware_m15_r6_firmware	< 1.28.0	1.28.0
dell	alienware_m15_r7_firmware	< 1.28.0	1.28.0
dell	alienware_m16_r1_firmware	< 1.15.0	1.15.0
dell	alienware_m18_r1_firmware	< 1.15.0	1.15.0
dell	alienware_m18_r2_firmware	< 1.2.1	1.2.1
dell	alienware_x14_r2_firmware	< 1.12.1	1.12.1
dell	alienware_x16_r1_firmware	< 1.12.1	1.12.1
dell	alienware_x16_r2_firmware	< 1.2.0	1.2.0
dell	chengming_3900_firmware	< 1.20.0	1.20.0
dell	chengming_3910_firmware	< 1.12.0	1.12.0
dell	chengming_3911_firmware	< 1.12.0	1.12.0
dell	chengming_3990_firmware	< 1.26.0	1.26.0
dell	chengming_3991_firmware	< 1.26.0	1.26.0
dell	cpg_bios	>= N/A < 1.28.0	1.28.0
dell	cpg_bios	>= N/A < 1.23.0	1.23.0
dell	cpg_bios	>= N/A < 1.15.0	1.15.0
dell	cpg_bios	>= N/A < 1.2.1	1.2.1
dell	cpg_bios	>= N/A < 1.12.1	1.12.1
dell	cpg_bios	>= N/A < 1.2.0	1.2.0
dell	cpg_bios	>= N/A < 1.20.0	1.20.0
dell	cpg_bios	>= N/A < 1.12.0	1.12.0
dell	cpg_bios	>= N/A < 1.26.0	1.26.0
dell	cpg_bios	>= N/A < 1.27.0	1.27.0
dell	cpg_bios	>= N/A < 1.13.0	1.13.0
dell	cpg_bios	>= N/A < 1.29.0	1.29.0

CWE-20