CVE-2024-39584

Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability.  A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.2 HIGH
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
dellCNA
8.2 HIGH
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
VendorProductVersion
dellalienware_m17_r3_firmware
𝑥
< 1.29.0
dellalienware_aurora_r15_amd_firmware
𝑥
< 1.15.0
dellalienware_x14_firmware
𝑥
< 1.21.0
dellalienware_x15_r1_firmware
𝑥
< 1.24.0
dellxps_8960_firmware
𝑥
< 2.12.0
dellxps_8950_firmware
𝑥
< 1.21.0
dellinspiron_3502_firmware
𝑥
< 1.18.0
dellinspiron_15_3521_firmware
𝑥
< 1.16.0
dellinspiron_15_3510_firmware
𝑥
< 1.21.0
dellaurora_r16_firmware
𝑥
< 2.13.0
dellalienware_x17_r2_firmware
𝑥
< 1.22.0
dellalienware_x17_r1_firmware
𝑥
< 1.24.0
dellalienware_x15_r2_firmware
𝑥
< 1.22.0
dellalienware_x15_r1_firmware
𝑥
< 1.24.0
dellalienware_x14_firmware
𝑥
< 1.21.0
dellalienware_m17_r4_firmware
𝑥
< 1.24.0
dellalienware_m17_r3_firmware
𝑥
< 1.29.0
dellalienware_m15_r4_firmware
𝑥
< 1.24.0
dellalienware_m15_r3_firmware
𝑥
< 1.29.0
dellalienware_aurora_ryzen_edition_r14_firmware
𝑥
< 2.19.1
dellalienware_aurora_r15_amd_firmware
𝑥
< 1.15.0
dellalienware_aurora_r15_firmware
𝑥
< 1.17.0
dellalienware_aurora_r13_firmware
𝑥
< 1.21.0
dellalienware_area_51m_r2_firmware
𝑥
< 1.29.0
𝑥
= Vulnerable software versions