CVE-2024-0160: Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this…

PriorityP428medium6.8CVSS 3.1

AVPACLPRNUINSUCHIHAH

EPSS

0.25%

16.1th percentile

Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS.

Affected

16 ranges

Vendor	Product	Version range	Fixed in
dell	cpg_bios	>= N/A < 1.32.0	1.32.0
dell	g3_3500_firmware	< 1.30.0	1.30.0
dell	g5_5500_firmware	< 1.30.0	1.30.0
dell	g7_7500_firmware	< 1.32.0	1.32.0
dell	g7_7700_firmware	< 1.32.0	1.32.0
dell	inspiron_7500_firmware	< 1.28.0	1.28.0
dell	inspiron_7501_firmware	< 1.28.0	1.28.0
dell	latitude_3410_firmware	< 1.29.0	1.29.0
dell	latitude_3420_firmware	< 1.36.0	1.36.0
dell	latitude_3510_firmware	< 1.29.0	1.29.0
dell	latitude_3520_firmware	< 1.36.0	1.36.0
dell	precision_5550_firmware	< 1.31.0	1.31.0
dell	precision_5750_firmware	< 1.30.0	1.30.0
dell	vostro_7500_firmware	< 1.28.0	1.28.0
dell	xps_15_9500_firmware	< 1.31.0	1.31.0
dell	xps_17_9700_firmware	< 1.30.0	1.30.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.