CVE-2024-0160

published 2024-06-12

CVE-2024-0160: Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this…

medium 6.8 CVSS 3.1

AV P AC L PR N UI N S U C H I H A H

Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS.

Affected

16 ranges

Vendor	Product	Version range	Fixed in
dell	cpg_bios	>= N/A < 1.32.0	1.32.0
dell	g3_3500_firmware	< 1.30.0	1.30.0
dell	g5_5500_firmware	< 1.30.0	1.30.0
dell	g7_7500_firmware	< 1.32.0	1.32.0
dell	g7_7700_firmware	< 1.32.0	1.32.0
dell	inspiron_7500_firmware	< 1.28.0	1.28.0
dell	inspiron_7501_firmware	< 1.28.0	1.28.0
dell	latitude_3410_firmware	< 1.29.0	1.29.0
dell	latitude_3420_firmware	< 1.36.0	1.36.0
dell	latitude_3510_firmware	< 1.29.0	1.29.0
dell	latitude_3520_firmware	< 1.36.0	1.36.0
dell	precision_5550_firmware	< 1.31.0	1.31.0
dell	precision_5750_firmware	< 1.30.0	1.30.0
dell	vostro_7500_firmware	< 1.28.0	1.28.0
dell	xps_15_9500_firmware	< 1.31.0	1.31.0
dell	xps_17_9700_firmware	< 1.30.0	1.30.0

CWE-863