CVE-2024-32860

published 2024-06-13

CVE-2024-32860: Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local…

high 8.2 CVSS 3.1

AV L AC L PR H UI N S C C H I H A H

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

Affected

31 ranges · showing 25

Vendor	Product	Version range	Fixed in
dell	alienware_area_51m_r2_firmware	< 1.26.0	1.26.0
dell	alienware_aurora_r11_firmware	< 1.0.24	1.0.24
dell	alienware_aurora_r12_firmware	< 1.1.25	1.1.25
dell	alienware_aurora_r13_firmware	<= 1.1.19	—
dell	alienware_aurora_r15_amd_firmware	< 1.13.0	1.13.0
dell	alienware_aurora_r15_firmware	< 1.1.12	1.1.12
dell	alienware_aurora_ryzen_edition_r14_firmware	< 2.18.0	2.18.0
dell	alienware_m15_r3_firmware	< 1.27.0	1.27.0
dell	alienware_m15_r4_firmware	<= 1.21.0	—
dell	alienware_m17_r3_firmware	< 1.27.0	1.27.0
dell	alienware_m17_r4_firmware	<= 1.21.0	—
dell	alienware_x14_firmware	<= 1.18.0	—
dell	alienware_x15_r1_firmware	<= 1.22.0	—
dell	alienware_x15_r2_firmware	< 1.20.0	1.20.0
dell	alienware_x17_r1_firmware	<= 1.22.0	—
dell	alienware_x17_r2_firmware	< 1.20.0	1.20.0
dell	aurora_r16_firmware	< 2.7.0	2.7.0
dell	cpg_bios	>= N/A < 1.0.24	1.0.24
dell	cpg_bios	>= N/A < 1.1.25	1.1.25
dell	cpg_bios	>= N/A < 1.19.0	1.19.0
dell	cpg_bios	>= N/A < 1.12.0	1.12.0
dell	cpg_bios	>= N/A < 1.13.0	1.13.0
dell	cpg_bios	>= N/A < 2.18.0	2.18.0
dell	cpg_bios	>= N/A < 2.7.0	2.7.0
dell	cpg_bios	>= N/A < 1.16.0	1.16.0

CWE-20