Dell Client Platform BIOS contains a Weak Authentication vulnerability.

Summary

Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Timeline

1. Feb 19, 2025, 4:46 PM UTCCVE published
2. Feb 19, 2025, 5:07 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: total

3. Feb 19, 2025, 5:08 PM UTCRecord last updated

Affected versions

• Dell Dell Client Platform BIOS

  fixed in 1.34.0; fixed in 1.28.0; fixed in 1.21.0; fixed in 1.8.0; fixed in 1.9.0; fixed in 1.17.0; fixed in 1.7.0; fixed in 1.26.0; fixed in 1.20.0; fixed in 1.31.1; fixed in 1.30.0; fixed in 1.29.0; fixed in 1.32.0; fixed in 1.21.1; fixed in 1.25.1; fixed in 1.33.0; fixed in 1.31.0; fixed in 2.31.0; fixed in 2.39.0; fixed in 2.43.0; fixed in 1.27.0; fixed in 1.22.0; fixed in 1.18.0; fixed in 2.30.0; fixed in 1.24.0; fixed in 1.25.0; fixed in 1.10.0; fixed in 1.14.0; fixed in 1.6.1; fixed in 1.15.1; fixed in 1.36.1; fixed in 1.33.1; fixed in 1.48.0; fixed in 1.37.0; fixed in 1.27.1; fixed in 1.26.1; fixed in 1.16.0; fixed in 1.35.1; fixed in 1.32.1; fixed in 1.38.0; fixed in 1.40.0; fixed in 1.35.0; fixed in 1.36.0; fixed in 1.41.0; fixed in 1.31.2; fixed in 1.18.1; fixed in 1.39.0; fixed in 1.53.0; fixed in 1.19.1; fixed in 1.38.1; fixed in 1.7.1; fixed in 1.8.1; fixed in 1.23.0; fixed in 1.34.1; fixed in 1.23.2; fixed in 1.30.1; fixed in 2.28.1; fixed in 2.22.1; fixed in 1.28.1; fixed in 1.1.44; fixed in 3.10.0; fixed in 1.6.0; fixed in 2.33.0; fixed in 2.20.0; fixed in 2.34.0; fixed in 1.15.0; fixed in 1.34.8; fixed in 1.9.1; fixed in 2.6.1; fixed in 01.11.02; fixed in 2.31.1; fixed in 3.27.1; fixed in 2.29.1; fixed in 2.18.1; fixed in 1.13.0; fixed in 1.11.0; fixed in 1.11.1; fixed in 2.24.1

References 1