CVE-2024-38483: Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could…

PriorityP428medium6.7CVSS 3.1

AVLACLPRHUINSUCHIHAH

EPSS

0.15%

4.7th percentile

Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

Affected

44 ranges· showing 25

Vendor	Product	Version range	Fixed in
dell	dell_client_platform_bios	>= N/A < 1.35.0	1.35.0
dell	dell_client_platform_bios	>= N/A < 2.32.0	2.32.0
dell	dell_client_platform_bios	>= N/A < 1.26.0	1.26.0
dell	embedded_box_pc_5000_firmware	< 1.26.0	1.26.0
dell	latitude_12_rugged_extreme_7214_firmware	< 1.47.0	1.47.0
dell	latitude_13_3380_firmware	< 1.28.0	1.28.0
dell	latitude_3300_firmware	< 1.29.0	1.29.0
dell	latitude_3390_2-in-1_firmware	< 1.32.0	1.32.0
dell	latitude_5280_firmware	< 1.37.0	1.37.0
dell	latitude_5288_firmware	< 1.37.0	1.37.0
dell	latitude_5290_2-in-1_firmware	< 1.35.0	1.35.0
dell	latitude_5290_firmware	< 1.36.0	1.36.0
dell	latitude_5400_firmware	< 1.32.0	1.32.0
dell	latitude_5414_rugged_firmware	< 1.47.0	1.47.0
dell	latitude_5420_rugged_firmware	< 1.34.0	1.34.0
dell	latitude_5424_rugged_firmware	< 1.34.0	1.34.0
dell	latitude_5480_firmware	< 1.37.0	1.37.0
dell	latitude_5488_firmware	< 1.37.0	1.37.0
dell	latitude_5490_firmware	< 1.36.0	1.36.0
dell	latitude_5580_firmware	< 1.37.0	1.37.0
dell	latitude_5590_firmware	< 1.36.0	1.36.0
dell	latitude_7212_rugged_extreme_tablet_firmware	< 1.51.0	1.51.0
dell	latitude_7280_firmware	< 1.38.0	1.38.0
dell	latitude_7285_2-in-1_firmware	< 1.27.0	1.27.0
dell	latitude_7290_firmware	< 1.39.0	1.39.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.