CVE-2024-47238

CWE-20 — Improper Input Validation3 documents3 sources

Severity

6.7MEDIUM

EPSS

0.0%

top 86.34%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Dell Dell Client Platform Bios Dell Edge Gateway 3000 Firmware Dell Edge Gateway 3001 Firmware +6 more

Timeline

PublishedDec 12

Description

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 0.8 | Impact: 6.0

Affected Packages9 packages

▶CVEListV5dell/dell_client_platform_biosN/A — 1.29.0+2

▶NVDdell/edge_gateway_3000_firmware< 1.19.0

▶NVDdell/edge_gateway_3001_firmware< 1.19.0

▶NVDdell/edge_gateway_3002_firmware< 1.19.0

▶NVDdell/edge_gateway_3003_firmware< 1.19.0

🔴Vulnerability Details

CVEList

CVE-2024-47238: Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component↗2024-12-12

▶

GHSA

GHSA-w6w4-cwx3-j2qh: Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component↗2024-12-12

▶