CVE-2024-28970

published 2024-06-12

CVE-2024-28970: Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this…

medium 4.4 CVSS 3.1

AV L AC L PR H UI N S U C N I N A H

Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of service.

Affected

20 ranges

Vendor	Product	Version range	Fixed in
dell	cpg_bios	>= N/A < 1.32.0	1.32.0
dell	cpg_bios	>= N/A < 1.6.0	1.6.0
dell	cpg_bios	>= N/A < 1.4.0	1.4.0
dell	cpg_bios	>= N/A < 1.11.0	1.11.0
dell	cpg_bios	>= N/A < 1.30.0	1.30.0
dell	cpg_bios	>= N/A < 2.14.0	2.14.0
dell	g7_7500_firmware	< 1.32.0	1.32.0
dell	g7_7700_firmware	< 1.32.0	1.32.0
dell	inspiron_14_plus_7440_firmware	< 1.6.0	1.6.0
dell	inspiron_16_7640_2-in-1_firmware	< 1.4.0	1.4.0
dell	inspiron_16_plus_7640_firmware	< 1.6.0	1.6.0
dell	inspiron_24_5420_all-in-one_firmware	< 1.11.0	1.11.0
dell	inspiron_27_7720_all-in-one_firmware	< 1.11.0	1.11.0
dell	inspiron_5402_firmware	< 1.30.0	1.30.0
dell	inspiron_5409_firmware	< 1.30.0	1.30.0
dell	inspiron_5502_firmware	< 1.30.0	1.30.0
dell	inspiron_5509_firmware	< 1.30.0	1.30.0
dell	precision_3660_firmware	< 2.14.0	2.14.0
dell	vostro_5402_firmware	< 1.30.0	1.30.0
dell	vostro_5502_firmware	< 1.30.0	1.30.0

CWE-787