CVE-2024-39584: Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit…

high8.2CVSS 3.1

AVLACLPRHUINSCCHIHAH

Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.

Affected

24 ranges

Vendor	Product	Version range	Fixed in
dell	alienware_area_51m_r2_firmware	< 1.29.0	1.29.0
dell	alienware_aurora_r13_firmware	< 1.21.0	1.21.0
dell	alienware_aurora_r15_amd_firmware	< 1.15.0	1.15.0
dell	alienware_aurora_r15_firmware	< 1.17.0	1.17.0
dell	alienware_aurora_ryzen_edition_r14_firmware	< 2.19.1	2.19.1
dell	alienware_m15_r3_firmware	< 1.29.0	1.29.0
dell	alienware_m15_r4_firmware	< 1.24.0	1.24.0
dell	alienware_m17_r3_firmware	< 1.29.0	1.29.0
dell	alienware_m17_r4_firmware	< 1.24.0	1.24.0
dell	alienware_x14_firmware	< 1.21.0	1.21.0
dell	alienware_x15_r1_firmware	< 1.24.0	1.24.0
dell	alienware_x15_r2_firmware	< 1.22.0	1.22.0
dell	alienware_x17_r1_firmware	< 1.24.0	1.24.0
dell	alienware_x17_r2_firmware	< 1.22.0	1.22.0
dell	aurora_r16_firmware	< 2.13.0	2.13.0
dell	dell_client_platform_bios	>= N/A < 1.29.0	1.29.0
dell	dell_client_platform_bios	>= N/A < 1.15.0	1.15.0
dell	dell_client_platform_bios	>= N/A < 1.21.0	1.21.0
dell	dell_client_platform_bios	>= N/A < 1.24.0	1.24.0
dell	inspiron_15_3510_firmware	< 1.21.0	1.21.0
dell	inspiron_15_3521_firmware	< 1.16.0	1.16.0
dell	inspiron_3502_firmware	< 1.18.0	1.18.0
dell	xps_8950_firmware	< 1.21.0	1.21.0
dell	xps_8960_firmware	< 2.12.0	2.12.0