CVE-2024-38483

Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.8 MEDIUM
LOCAL
HIGH
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L
dellCNA
5.8 MEDIUM
LOCAL
HIGH
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 7%
VendorProductVersion
delllatitude_5290_2-in-1_firmware
𝑥
< 1.35.0
dellprecision_3420_tower_firmware
𝑥
< 2.32.0
dellprecision_3620_firmware
𝑥
< 2.32.0
dellwyse_7040_thin_client_firmware
𝑥
< 1.26.0
dellprecision_7720_firmware
𝑥
< 1.37.0
dellprecision_7520_firmware
1.37.0
dellprecision_5530_2-in-1_firmware
𝑥
< 1.32.8
dellprecision_5520_firmware
𝑥
< 1.39.0
dellprecision_3520_firmware
𝑥
< 1.37.0
delloptiplex_7450_all-in-one_firmware
𝑥
< 1.34.0
delloptiplex_5050_firmware
𝑥
< 1.31.0
delloptiplex_3050_all-in-one_firmware
𝑥
< 1.34.0
delloptiplex_3050_firmware
𝑥
< 1.31.0
delllatitude_7490_firmware
𝑥
< 1.39.0
delllatitude_7480_firmware
𝑥
< 1.38.0
delllatitude_7424_rugged_extreme_firmware
𝑥
< 1.34.0
delllatitude_7414_rugged_firmware
𝑥
< 1.47.0
delllatitude_7390_2-in-1_firmware
𝑥
< 1.36.0
delllatitude_7390_firmware
𝑥
< 1.39.0
delllatitude_7380_firmware
𝑥
< 1.38.0
delllatitude_7290_firmware
𝑥
< 1.39.0
delllatitude_7285_2-in-1_firmware
𝑥
< 1.27.0
delllatitude_7280_firmware
𝑥
< 1.38.0
delllatitude_7212_rugged_extreme_tablet_firmware
𝑥
< 1.51.0
delllatitude_5590_firmware
𝑥
< 1.36.0
delllatitude_5580_firmware
𝑥
< 1.37.0
delllatitude_5490_firmware
𝑥
< 1.36.0
delllatitude_5488_firmware
𝑥
< 1.37.0
delllatitude_5480_firmware
𝑥
< 1.37.0
delllatitude_5424_rugged_firmware
𝑥
< 1.34.0
delllatitude_5420_rugged_firmware
𝑥
< 1.34.0
delllatitude_5414_rugged_firmware
𝑥
< 1.47.0
delllatitude_5400_firmware
𝑥
< 1.32.0
delllatitude_5290_firmware
𝑥
< 1.36.0
delllatitude_5288_firmware
𝑥
< 1.37.0
delllatitude_5280_firmware
𝑥
< 1.37.0
delllatitude_3390_2-in-1_firmware
𝑥
< 1.32.0
delllatitude_3300_firmware
𝑥
< 1.29.0
delllatitude_13_3380_firmware
𝑥
< 1.28.0
delllatitude_12_rugged_extreme_7214_firmware
𝑥
< 1.47.0
dellembedded_box_pc_5000_firmware
𝑥
< 1.26.0
𝑥
= Vulnerable software versions