CVE-2024-32856

CWE-20 — Improper Input Validation3 documents3 sources

Severity

6.0MEDIUM

EPSS

0.0%

top 90.08%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Dell CPG Bios Dell Alienware Area 51M R2 Firmware Dell Alienware Aurora R10 Firmware +21 more

Timeline

PublishedJun 13

Description

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:LExploitability: 0.8 | Impact: 4.2

Affected Packages24 packages

▶CVEListV5dell/cpg_biosN/A — 2.8.0+8

▶NVDdell/xps_8950_firmware< 1.19.0

▶NVDdell/xps_8960_firmware< 2.6.0

▶NVDdell/aurora_r16_firmware< 2.7.0

▶NVDdell/alienware_x14_firmware< 1.18.0

🔴Vulnerability Details

GHSA

GHSA-5p75-g83x-2fgj: Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component↗2024-06-13

▶

CVEList

CVE-2024-32856: Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component↗2024-06-13

▶