CVE-2019-3717

05.08.2019, 17:15

Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An unauthenticated attacker with physical access to the system could potentially bypass intended Secure Boot restrictions to run unsigned and untrusted code on expansion cards installed in the system during platform boot. Refer to https://www.dell.com/support/article/us/en/04/sln317683/dsa-2019-043-dell-client-improper-access-control-vulnerability?lang=en for versions affected by this vulnerability.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.8 MEDIUM	PHYSICAL	LOW	NONE	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
dell	CNA	7.1 HIGH	PHYSICAL	HIGH	NONE	CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 21%

Vendor	Product	Version
dell	chengming_3967_firmware	𝑥 < 1.5.0
dell	chengming_3977_firmware	𝑥 < 1.6.0
dell	chengming_3980_firmware	𝑥 < 1.5.21
dell	g3_3579_firmware	𝑥 < 1.9.0
dell	g3_3779_firmware	𝑥 < 1.9.0
dell	g5_5587_firmware	𝑥 < 1.10.0
dell	g5_5590_firmware	𝑥 < 1.3.1
dell	g7_7588_firmware	𝑥 < 1.10.0
dell	g7_7590_firmware	𝑥 < 1.3.1
dell	g7_7790_firmware	𝑥 < 1.3.1
dell	embedded_box_pc_5000_firmware	𝑥 < 1.5.6
dell	inspiron_3153_firmware	𝑥 < 1.22.0
dell	inspiron_3158_firmware	𝑥 < 1.22.0
dell	inspiron_5368_firmware	𝑥 < 1.19.0
dell	inspiron_5378_firmware	𝑥 < 1.27.0
dell	inspiron_5379_firmware	𝑥 < 1.11.0
dell	inspiron_7353_firmware	𝑥 < 1.22.0
dell	inspiron_7359_firmware	𝑥 < 1.22.0
dell	inspiron_7368_firmware	𝑥 < 1.19.0
dell	inspiron_7373_firmware	𝑥 < 1.13.1
dell	inspiron_7378_firmware	𝑥 < 1.27.0
dell	inspiron_7370_firmware	𝑥 < 1.13.1
dell	inspiron_3459_firmware	𝑥 < 1.9.0
dell	inspiron_3467_firmware	𝑥 < 2.9.0
dell	inspiron_3468_firmware	𝑥 < 1.12.0
dell	inspiron_5468_firmware	𝑥 < 1.9.1
dell	inspiron_7460_firmware	𝑥 < 1.10.0
dell	inspiron_7466_firmware	𝑥 < 1.4.0
dell	inspiron_7467_firmware	𝑥 < 1.9.0
dell	inspiron_3559_firmware	𝑥 < 1.9.0
dell	inspiron_3567_firmware	𝑥 < 2.9.0
dell	inspiron_3568_firmware	𝑥 < 1.12.0
dell	inspiron_5566_firmware	𝑥 < 1.9.1
dell	inspiron_5567_firmware	𝑥 < 1.2.7
dell	inspiron_7560_firmware	𝑥 < 1.10.0
dell	inspiron_5568_firmware	𝑥 < 1.19.0
dell	inspiron_5578_firmware	𝑥 < 1.27.0
dell	inspiron_5579_firmware	𝑥 < 1.11.0
dell	inspiron_7568_firmware	𝑥 < 1.22.0
dell	inspiron_7569_firmware	𝑥 < 1.19.0
dell	inspiron_7573_firmware	𝑥 < 1.13.1
dell	inspiron_7579_firmware	𝑥 < 1.27.0
dell	inspiron_7570_firmware	𝑥 < 1.13.1
dell	inspiron_7566_firmware	𝑥 < 1.4.0
dell	inspiron_7567_firmware	𝑥 < 1.9.0
dell	inspiron_7577_firmware	𝑥 < 1.7.0
dell	inspiron_5767_firmware	𝑥 < 1.2.7
dell	inspiron_7773_firmware	𝑥 < 1.11.0
dell	inspiron_7778_firmware	𝑥 < 1.19.0
dell	inspiron_7779_firmware	𝑥 < 1.27.0
dell	inspiron_3268_firmware	𝑥 < 1.11.1
dell	inspiron_3470_firmware	𝑥 < 1.5.21
dell	inspiron_3476_firmware	𝑥 < 1.7.0
dell	inspiron_3480_firmware	𝑥 < 1.4.1
dell	inspiron_3481_firmware	𝑥 < 1.2.0
dell	inspiron_3576_firmware	𝑥 < 1.7.0
dell	inspiron_3580_firmware	𝑥 < 1.4.1
dell	inspiron_3583_firmware	𝑥 < 1.4.1
dell	inspiron_3581_firmware	𝑥 < 1.2.0
dell	inspiron_3584_firmware	𝑥 < 1.2.0
dell	inspiron_3668_firmware	𝑥 < 1.11.1
dell	inspiron_670_firmware	𝑥 < 1.5.21
dell	inspiron_3780_firmware	𝑥 < 1.4.1
dell	inspiron_3781_firmware	𝑥 < 1.2.0
dell	inspiron_5370_firmware	𝑥 < 1.11.1
dell	inspiron_5457_firmware	𝑥 < 1.6.0
dell	inspiron_5459_firmware	𝑥 < 1.7.0
dell	inspiron_5480_firmware	𝑥 < 2.2.0
dell	inspiron_5481_firmware	𝑥 < 2.2.0
dell	inspiron_5482_firmware	𝑥 < 2.2.0
dell	inspiron_5557_firmware	𝑥 < 1.6.0
dell	inspiron_5559_firmware	𝑥 < 1.7.0
dell	inspiron_5570_firmware	𝑥 < 1.2.1
dell	inspiron_5580_firmware	𝑥 < 2.2.0
dell	inspiron_5582_firmware	𝑥 < 2.2.0
dell	inspiron_5759_firmware	𝑥 < 1.7.0
dell	inspiron_5770_firmware	𝑥 < 1.2.1
dell	inspiron_7380_firmware	𝑥 < 1.6.0
dell	inspiron_7386_firmware	𝑥 < 1.4.0
dell	inspiron_7472_firmware	𝑥 < 1.1.9
dell	inspiron_7572_firmware	𝑥 < 1.1.9
dell	inspiron_7580_firmware	-
dell	inspiron_7586_firmware	𝑥 < 1.4.0
dell	inspiron_7786_firmware	𝑥 < 1.4.0
dell	latitude_3180_firmware	𝑥 < 1.7.2
dell	latitude_3189_firmware	𝑥 < 1.7.2
dell	latitude_3190_firmware	𝑥 < 1.6.1
dell	latitude_3379_firmware	𝑥 < 1.0.25
dell	latitude_3380_firmware	𝑥 < 1.9.0
dell	latitude_3390_firmware	𝑥 < 1.8.4
dell	latitude_3470_firmware	𝑥 < 1.14.1
dell	latitude_3480_firmware	𝑥 < 1.11.0
dell	latitude_3490_firmware	𝑥 < 1.9.7
dell	latitude_3570_firmware	𝑥 < 1.14.1
dell	latitude_3580_firmware	𝑥 < 1.11.0
dell	latitude_3590_firmware	𝑥 < 1.9.7
dell	latitude_5175_firmware	𝑥 < 1.5.1
dell	latitude_5179_firmware	𝑥 < 1.5.1
dell	latitude_5280_firmware	𝑥 < 1.14.2
dell	latitude_5285_firmware	𝑥 < 1.5.2
dell	latitude_5288_firmware	𝑥 < 1.14.2
dell	latitude_5289_firmware	𝑥 < 1.17.1
dell	latitude_5290_firmware	𝑥 < 1.8.3
dell	latitude_5290_2-in-1_firmware	𝑥 < 1.7.3
dell	latitude_5414_firmware	𝑥 < 1.23.0
dell	latitude_5420_firmware	𝑥 < 1.4.0
dell	latitude_5480_firmware	𝑥 < 1.14.2
dell	latitude_5488_firmware	𝑥 < 1.14.2
dell	latitude_5490_firmware	𝑥 < 1.8.3
dell	latitude_5491_firmware	𝑥 < 1.7.4
dell	latitude_5580_firmware	𝑥 < 1.14.2
dell	latitude_5590_firmware	𝑥 < 1.8.3
dell	latitude_5591_firmware	𝑥 < 1.7.4
dell	latitude_7212_firmware	𝑥 < 1.25.0
dell	latitude_7214_firmware	-
dell	latitude_7275_firmware	𝑥 < 1.5.1
dell	latitude_7280_firmware	𝑥 < 1.14.1
dell	latitude_7285_firmware	𝑥 < 1.3.1
dell	latitude_7290_firmware	𝑥 < 1.9.3
dell	latitude_7370_firmware	𝑥 < 1.17.4
dell	latitude_7380_firmware	𝑥 < 1.14.1
dell	latitude_7389_firmware	𝑥 < 1.17.1
dell	latitude_7390_firmware	𝑥 < 1.9.3
dell	latitude_7390_2-in-1_firmware	𝑥 < 1.8.3
dell	latitude_7414_firmware	𝑥 < 1.23.0
dell	latitude_7424_rugged_extreme_firmware	𝑥 < 1.4.0
dell	latitude_7480_firmware	𝑥 < 1.14.1
dell	latitude_7490_firmware	𝑥 < 1.9.3
dell	latitude_e5270_firmware	𝑥 < 1.20.4
dell	latitude_e5470_firmware	𝑥 < 1.20.4
dell	latitude_e5570_firmware	𝑥 < 1.20.4
dell	latitude_e7270_firmware	𝑥 < 1.21.6
dell	latitude_e7470_firmware	𝑥 < 1.21.6
dell	optiplex_3040_firmware	𝑥 < 1.10.1
dell	optiplex_3046_firmware	𝑥 < 1.7.0
dell	optiplex_3050_firmware	𝑥 < 1.11.1
dell	optiplex_3050_aio_firmware	𝑥 < 1.12.1
dell	optiplex_3060_firmware	𝑥 < 1.3.4
dell	optiplex_3240_aio_firmware	𝑥 < 1.7.0
dell	optiplex_5040_firmware	𝑥 < 1.13.0
dell	optiplex_5050_firmware	𝑥 < 1.11.1
dell	optiplex_5060_firmware	𝑥 < 1.3.4
dell	optiplex_5250_aio_firmware	𝑥 < 1.12.1
dell	optiplex_5260_aio_firmware	𝑥 < 1.6.4
dell	optiplex_7040_firmware	𝑥 < 1.14.0
dell	optiplex_7050_firmware	𝑥 < 1.11.1
dell	optiplex_7060_firmware	𝑥 < 1.3.4
dell	optiplex_7440_aio_firmware	𝑥 < 1.10.0
dell	optiplex_7450_aio_firmware	𝑥 < 1.12.1
dell	optiplex_7460_aio_firmware	𝑥 < 1.6.4
dell	optiplex_7760_aio_firmware	𝑥 < 1.6.4
dell	optiplex_xe3_firmware	𝑥 < 1.3.4
dell	precision_3420_firmware	𝑥 < 2.12.0
dell	precision_3430_firmware	𝑥 < 1.3.4
dell	precision_3510_firmware	𝑥 < 1.20.4
dell	precision_3520_firmware	𝑥 < 1.14.2
dell	precision_3530_firmware	𝑥 < 1.7.4
dell	precision_3620_firmware	𝑥 < 2.12.0
dell	precision_3630_firmware	𝑥 < 1.1.10
dell	precision_3930_firmware	𝑥 < 1.1.9
dell	precision_5510_firmware	𝑥 < 1.10.0
dell	precision_5520_firmware	𝑥 < 1.14.2
dell	precision_5530_firmware	𝑥 < 1.10.1
dell	precision_5530_2-in-1_firmware	𝑥 < 1.4.8
dell	precision_5720_aio_firmware	𝑥 < 2.4.2
dell	precision_5820_firmware	𝑥 < 1.10.4
dell	precision_7510_firmware	𝑥 < 1.17.7
dell	precision_7520_firmware	𝑥 < 1.14.1
dell	precision_7530_firmware	𝑥 < 1.8.2
dell	precision_7710_firmware	𝑥 < 1.17.7
dell	precision_7720_firmware	𝑥 < 1.14.1
dell	precision_7820_firmware	𝑥 < 1.10.3
dell	precision_7920_firmware	𝑥 < 1.10.3
dell	vostro_3468_firmware	𝑥 < 3.3.0
dell	vostro_5468_firmware	𝑥 < 1.10.0
dell	vostro_3568_firmware	𝑥 < 3.3.0
dell	vostro_5568_firmware	𝑥 < 1.10.0
dell	vostro_7570_firmware	𝑥 < 1.7.0
dell	vostro_7580_firmware	𝑥 < 1.10.0
dell	vostro_3070_firmware	𝑥 < 1.5.21
dell	vostro_3267_firmware	𝑥 < 1.11.1
dell	vostro_3268_firmware	𝑥 < 1.11.1
dell	vostro_3459_firmware	𝑥 < 1.6.0
dell	vostro_3470_firmware	𝑥 < 1.5.21
dell	vostro_3478_firmware	𝑥 < 1.7.0
dell	vostro_3480_firmware	𝑥 < 1.4.1
dell	vostro_3580_firmware	𝑥 < 1.4.1
dell	vostro_3581_firmware	𝑥 < 1.2.0
dell	vostro_3584_firmware	𝑥 < 1.2.0
dell	vostro_3583_firmware	𝑥 < 1.4.1
dell	vostro_3660_firmware	𝑥 < 1.11.1
dell	vostro_3667_firmware	𝑥 < 1.11.1
dell	vostro_3668_firmware	𝑥 < 1.11.1
dell	vostro_3669_firmware	𝑥 < 1.11.1
dell	vostro_3670_firmware	𝑥 < 1.5.21
dell	vostro_5370_firmware	𝑥 < 1.11.1
dell	vostro_5471_firmware	𝑥 < 1.11.1
dell	vostro_5481_firmware	𝑥 < 2.2.0
dell	vostro_5581_firmware	𝑥 < 2.2.0
dell	wyse_5070_firmware	𝑥 < 1.1.4
dell	wyse_7040_firmware	𝑥 < 1.5.9
dell	xps_9250_firmware	𝑥 < 1.5.1
dell	xps_9350_firmware	𝑥 < 1.10.1
dell	xps_9360_firmware	𝑥 < 2.11.0
dell	xps_9370_firmware	𝑥 < 1.9.0
dell	xps_9380_firmware	𝑥 < 1.3.2
dell	xps_9550_firmware	𝑥 < 1.10.0
dell	xps_9560_firmware	𝑥 < 1.14.2
dell	xps_9570_firmware	𝑥 < 1.9.1
dell	xps_7760_firmware	𝑥 < 2.4.2
dell	xps_8900_firmware	𝑥 < 2.5.0
dell	xps_9575_firmware	𝑥 < 1.4.0

𝑥

= Vulnerable software versions

References

https://www.dell.com/support/article/us/en/04/sln317683/dsa-2019-043-dell-client-improper-access-control-vulnerability?lang=en