Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-0158

Dell BIOS contains an improper input validation vulnerability.

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 1.28.0, 1.23.0, 1.15.0, 1.2.1, 1.12.1, and 63 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Dell CPG BIOS

    fixed in 1.28.0; fixed in 1.23.0; fixed in 1.15.0; fixed in 1.2.1; fixed in 1.12.1; fixed in 1.2.0; fixed in 1.20.0; fixed in 1.12.0; fixed in 1.26.0; fixed in 1.27.0; fixed in 1.13.0; fixed in 1.29.0; fixed in 1.19.0; fixed in 1.25.0; fixed in 1.31.0; fixed in 2.27.0; fixed in 2.35.0; fixed in 2.39.0; fixed in 1.17.0; fixed in 1.24.0; fixed in 2.26.0; fixed in 1.13.1; fixed in 2.25.0; fixed in 1.3.1; fixed in 1.18.0; fixed in 1.21.0; fixed in 1.22.0; fixed in 1.9.0; fixed in 1.3.0; fixed in 1.30.0; fixed in 1.32.0; fixed in 1.29..0; fixed in 1.45.0; fixed in 1.33.0; fixed in 1.11.0; fixed in 1.35.0; fixed in 1.34.0; fixed in 1.36.0; fixed in 1.36.2; fixed in 1.25.1; fixed in 1.21.1; fixed in 1.4.1; fixed in 1.49.0; fixed in 1.37.0; fixed in 1.34.2; fixed in 1.30.1; fixed in 1.16.1; fixed in 2.24.0; fixed in 2.18.0; fixed in 1.1.38; fixed in 3.3.2; fixed in 2.29.0; fixed in 2.12.0; fixed in 2.30.0; fixed in 1.30.8; fixed in 1.10.0; fixed in 1.26.1; fixed in 1.1.17; fixed in 1.20.1; fixed in 1.7.0; fixed in 01.03.00; fixed in 1.1.16; fixed in 3.21.0; fixed in 2.23.0; fixed in 1.19.1; fixed in 2.10.0; fixed in 2.18.1; fixed in 1.14.0

References 1

dell.com