CVE-2024-28970: Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this…

PriorityP415medium4.4CVSS 3.1

AVLACLPRHUINSUCNINAH

EPSS

0.14%

3.5th percentile

Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of service.

Affected

20 ranges

Vendor	Product	Version range	Fixed in
dell	cpg_bios	>= N/A < 1.32.0	1.32.0
dell	cpg_bios	>= N/A < 1.6.0	1.6.0
dell	cpg_bios	>= N/A < 1.4.0	1.4.0
dell	cpg_bios	>= N/A < 1.11.0	1.11.0
dell	cpg_bios	>= N/A < 1.30.0	1.30.0
dell	cpg_bios	>= N/A < 2.14.0	2.14.0
dell	g7_7500_firmware	< 1.32.0	1.32.0
dell	g7_7700_firmware	< 1.32.0	1.32.0
dell	inspiron_14_plus_7440_firmware	< 1.6.0	1.6.0
dell	inspiron_16_7640_2-in-1_firmware	< 1.4.0	1.4.0
dell	inspiron_16_plus_7640_firmware	< 1.6.0	1.6.0
dell	inspiron_24_5420_all-in-one_firmware	< 1.11.0	1.11.0
dell	inspiron_27_7720_all-in-one_firmware	< 1.11.0	1.11.0
dell	inspiron_5402_firmware	< 1.30.0	1.30.0
dell	inspiron_5409_firmware	< 1.30.0	1.30.0
dell	inspiron_5502_firmware	< 1.30.0	1.30.0
dell	inspiron_5509_firmware	< 1.30.0	1.30.0
dell	precision_3660_firmware	< 2.14.0	2.14.0
dell	vostro_5402_firmware	< 1.30.0	1.30.0
dell	vostro_5502_firmware	< 1.30.0	1.30.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.