CVE-2024-39584

Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability.  A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.2 HIGH
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
dellCNA
8.2 HIGH
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 6%
VendorProductVersion
dellalienware_m17_r3_firmware
𝑥
< 1.29.0
dellalienware_aurora_r15_amd_firmware
𝑥
< 1.15.0
dellalienware_x14_firmware
𝑥
< 1.21.0
dellalienware_x15_r1_firmware
𝑥
< 1.24.0
dellxps_8960_firmware
𝑥
< 2.12.0
dellxps_8950_firmware
𝑥
< 1.21.0
dellinspiron_3502_firmware
𝑥
< 1.18.0
dellinspiron_15_3521_firmware
𝑥
< 1.16.0
dellinspiron_15_3510_firmware
𝑥
< 1.21.0
dellaurora_r16_firmware
𝑥
< 2.13.0
dellalienware_x17_r2_firmware
𝑥
< 1.22.0
dellalienware_x17_r1_firmware
𝑥
< 1.24.0
dellalienware_x15_r2_firmware
𝑥
< 1.22.0
dellalienware_x15_r1_firmware
𝑥
< 1.24.0
dellalienware_x14_firmware
𝑥
< 1.21.0
dellalienware_m17_r4_firmware
𝑥
< 1.24.0
dellalienware_m17_r3_firmware
𝑥
< 1.29.0
dellalienware_m15_r4_firmware
𝑥
< 1.24.0
dellalienware_m15_r3_firmware
𝑥
< 1.29.0
dellalienware_aurora_ryzen_edition_r14_firmware
𝑥
< 2.19.1
dellalienware_aurora_r15_amd_firmware
𝑥
< 1.15.0
dellalienware_aurora_r15_firmware
𝑥
< 1.17.0
dellalienware_aurora_r13_firmware
𝑥
< 1.21.0
dellalienware_area_51m_r2_firmware
𝑥
< 1.29.0
𝑥
= Vulnerable software versions