CVE-2019-3717
Medium
Description
Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An unauthenticated attacker with physical access to the system could potentially bypass intended Secure Boot restrictions to run unsigned and untrusted code on expansion cards installed in the system during platform boot. Refer to https://www.dell.com/support/article/us/en/04/sln317683/dsa-2019-043-dell-client-improper-access-control-vulnerability?lang=en for versions affected by this vulnerability.
SeverityMedium
CVSS6.8
Exploit probability—
ProductDell Chengming 3967 Firmware
PublishedAug 5, 2019
First seenAug 5, 2019
How to fix
Update
- dell chengming_3967_firmware1.5.0 or later
- dell chengming_3977_firmware1.6.0 or later
- dell chengming_3980_firmware1.5.21 or later
- dell g3_3579_firmware1.9.0 or later
- dell g3_3779_firmware1.9.0 or later
- dell g5_5587_firmware1.10.0 or later
- dell g5_5590_firmware1.3.1 or later
- dell g7_7588_firmware1.10.0 or later
- dell g7_7590_firmware1.3.1 or later
- dell g7_7790_firmware1.3.1 or later
- dell embedded_box_pc_5000_firmware1.5.6 or later
- dell inspiron_3153_firmware1.22.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell chengming_3967_firmware | v < 1.5.0 | 1.5.0 |
| dell chengming_3977_firmware | v < 1.6.0 | 1.6.0 |
| dell chengming_3980_firmware | v < 1.5.21 | 1.5.21 |
| dell g3_3579_firmware | v < 1.9.0 | 1.9.0 |
| dell g3_3779_firmware | v < 1.9.0 | 1.9.0 |
| dell g5_5587_firmware | v < 1.10.0 | 1.10.0 |
| dell g5_5590_firmware | v < 1.3.1 | 1.3.1 |
| dell g7_7588_firmware | v < 1.10.0 | 1.10.0 |
| dell g7_7590_firmware | v < 1.3.1 | 1.3.1 |
| dell g7_7790_firmware | v < 1.3.1 | 1.3.1 |
| dell embedded_box_pc_5000_firmware | v < 1.5.6 | 1.5.6 |
| dell inspiron_3153_firmware | v < 1.22.0 | 1.22.0 |
| dell inspiron_3158_firmware | v < 1.22.0 | 1.22.0 |
| dell inspiron_5368_firmware | v < 1.19.0 | 1.19.0 |
| dell inspiron_5378_firmware | v < 1.27.0 | 1.27.0 |
| dell inspiron_5379_firmware | v < 1.11.0 | 1.11.0 |
| dell inspiron_7353_firmware | v < 1.22.0 | 1.22.0 |
| dell inspiron_7359_firmware | v < 1.22.0 | 1.22.0 |
| dell inspiron_7368_firmware | v < 1.19.0 | 1.19.0 |
| dell inspiron_7373_firmware | v < 1.13.1 | 1.13.1 |
| dell inspiron_7378_firmware | v < 1.27.0 | 1.27.0 |
| dell inspiron_7370_firmware | v < 1.13.1 | 1.13.1 |
| dell inspiron_3459_firmware | v < 1.9.0 | 1.9.0 |
| dell inspiron_3467_firmware | v < 2.9.0 | 2.9.0 |
| dell inspiron_3468_firmware | v < 1.12.0 | 1.12.0 |
| dell inspiron_5468_firmware | v < 1.9.1 | 1.9.1 |
| dell inspiron_7460_firmware | v < 1.10.0 | 1.10.0 |
| dell inspiron_7466_firmware | v < 1.4.0 | 1.4.0 |
| dell inspiron_7467_firmware | v < 1.9.0 | 1.9.0 |
| dell inspiron_3458_firmware | v < a18 | a18 |
| dell inspiron_3559_firmware | v < 1.9.0 | 1.9.0 |
| dell inspiron_3567_firmware | v < 2.9.0 | 2.9.0 |
| dell inspiron_3568_firmware | v < 1.12.0 | 1.12.0 |
| dell inspiron_5566_firmware | v < 1.9.1 | 1.9.1 |
| dell inspiron_5567_firmware | v < 1.2.7 | 1.2.7 |
| dell inspiron_7560_firmware | v < 1.10.0 | 1.10.0 |
| dell inspiron_5568_firmware | v < 1.19.0 | 1.19.0 |
| dell inspiron_5578_firmware | v < 1.27.0 | 1.27.0 |
| dell inspiron_5579_firmware | v < 1.11.0 | 1.11.0 |
| dell inspiron_7568_firmware | v < 1.22.0 | 1.22.0 |
| dell inspiron_7569_firmware | v < 1.19.0 | 1.19.0 |
| dell inspiron_7573_firmware | v < 1.13.1 | 1.13.1 |
| dell inspiron_7579_firmware | v < 1.27.0 | 1.27.0 |
| dell inspiron_7570_firmware | v < 1.13.1 | 1.13.1 |
| dell inspiron_7566_firmware | v < 1.4.0 | 1.4.0 |
| dell inspiron_7567_firmware | v < 1.9.0 | 1.9.0 |
| dell inspiron_7577_firmware | v < 1.7.0 | 1.7.0 |
| dell inspiron_3558_firmware | v < a18 | a18 |
| dell inspiron_5767_firmware | v < 1.2.7 | 1.2.7 |
| dell inspiron_7773_firmware | v < 1.11.0 | 1.11.0 |
| dell inspiron_7778_firmware | v < 1.19.0 | 1.19.0 |
| dell inspiron_7779_firmware | v < 1.27.0 | 1.27.0 |
| dell inspiron_3268_firmware | v < 1.11.1 | 1.11.1 |
| dell inspiron_3470_firmware | v < 1.5.21 | 1.5.21 |
| dell inspiron_3476_firmware | v < 1.7.0 | 1.7.0 |
| dell inspiron_3480_firmware | v < 1.4.1 | 1.4.1 |
| dell inspiron_3481_firmware | v < 1.2.0 | 1.2.0 |
| dell inspiron_3576_firmware | v < 1.7.0 | 1.7.0 |
| dell inspiron_3580_firmware | v < 1.4.1 | 1.4.1 |
| dell inspiron_3583_firmware | v < 1.4.1 | 1.4.1 |
| dell inspiron_3581_firmware | v < 1.2.0 | 1.2.0 |
| dell inspiron_3584_firmware | v < 1.2.0 | 1.2.0 |
| dell inspiron_3668_firmware | v < 1.11.1 | 1.11.1 |
| dell inspiron_670_firmware | v < 1.5.21 | 1.5.21 |
| dell inspiron_3780_firmware | v < 1.4.1 | 1.4.1 |
| dell inspiron_3781_firmware | v < 1.2.0 | 1.2.0 |
| dell inspiron_5370_firmware | v < 1.11.1 | 1.11.1 |
| dell inspiron_5457_firmware | v < 1.6.0 | 1.6.0 |
| dell inspiron_5458_firmware | v < a17 | a17 |
| dell inspiron_5459_firmware | v < 1.7.0 | 1.7.0 |
| dell inspiron_5480_firmware | v < 2.2.0 | 2.2.0 |
| dell inspiron_5481_firmware | v < 2.2.0 | 2.2.0 |
| dell inspiron_5482_firmware | v < 2.2.0 | 2.2.0 |
| dell inspiron_5557_firmware | v < 1.6.0 | 1.6.0 |
| dell inspiron_5558_firmware | v < a17 | a17 |
| dell inspiron_5559_firmware | v < 1.7.0 | 1.7.0 |
| dell inspiron_5570_firmware | v < 1.2.1 | 1.2.1 |
| dell inspiron_5580_firmware | v < 2.2.0 | 2.2.0 |
| dell inspiron_5582_firmware | v < 2.2.0 | 2.2.0 |
| dell inspiron_5758_firmware | v < a17 | a17 |
| dell inspiron_5759_firmware | v < 1.7.0 | 1.7.0 |
| dell inspiron_5770_firmware | v < 1.2.1 | 1.2.1 |
| dell inspiron_7380_firmware | v < 1.6.0 | 1.6.0 |
| dell inspiron_7386_firmware | v < 1.4.0 | 1.4.0 |
| dell inspiron_7472_firmware | v < 1.1.9 | 1.1.9 |
| dell inspiron_7572_firmware | v < 1.1.9 | 1.1.9 |
| dell inspiron_7580_firmware | No range specified | — |
| dell inspiron_7586_firmware | v < 1.4.0 | 1.4.0 |
| dell inspiron_7786_firmware | v < 1.4.0 | 1.4.0 |
| dell latitude_3150_firmware | v < a10 | a10 |
| dell latitude_3160_firmware | v < a12 | a12 |
| dell latitude_3180_firmware | v < 1.7.2 | 1.7.2 |
| dell latitude_3189_firmware | v < 1.7.2 | 1.7.2 |
| dell latitude_3190_firmware | v < 1.6.1 | 1.6.1 |
| dell latitude_3350_firmware | v < a15 | a15 |
| dell latitude_3379_firmware | v < 1.0.25 | 1.0.25 |
| dell latitude_3380_firmware | v < 1.9.0 | 1.9.0 |
| dell latitude_3390_firmware | v < 1.8.4 | 1.8.4 |
| dell latitude_3450_firmware | v < a19 | a19 |
| dell latitude_3460_firmware | v < a15 | a15 |
| dell latitude_3470_firmware | v < 1.14.1 | 1.14.1 |
| dell latitude_3480_firmware | v < 1.11.0 | 1.11.0 |
| dell latitude_3490_firmware | v < 1.9.7 | 1.9.7 |
| dell latitude_3550_firmware | v < a19 | a19 |
| dell latitude_3560_firmware | v < a15 | a15 |
| dell latitude_3570_firmware | v < 1.14.1 | 1.14.1 |
| dell latitude_3580_firmware | v < 1.11.0 | 1.11.0 |
| dell latitude_3590_firmware | v < 1.9.7 | 1.9.7 |
| dell latitude_5175_firmware | v < 1.5.1 | 1.5.1 |
| dell latitude_5179_firmware | v < 1.5.1 | 1.5.1 |
| dell latitude_5250_firmware | v < a21 | a21 |
| dell latitude_5280_firmware | v < 1.14.2 | 1.14.2 |
| dell latitude_5285_firmware | v < 1.5.2 | 1.5.2 |
| dell latitude_5288_firmware | v < 1.14.2 | 1.14.2 |
| dell latitude_5289_firmware | v < 1.17.1 | 1.17.1 |
| dell latitude_5290_firmware | v < 1.8.3 | 1.8.3 |
| dell latitude_5290_2-in-1_firmware | v < 1.7.3 | 1.7.3 |
| dell latitude_5414_firmware | v < 1.23.0 | 1.23.0 |
| dell latitude_5420_firmware | v < 1.4.0 | 1.4.0 |
| dell latitude_5450_firmware | v < a21 | a21 |
| dell latitude_5480_firmware | v < 1.14.2 | 1.14.2 |
| dell latitude_5488_firmware | v < 1.14.2 | 1.14.2 |
| dell latitude_5490_firmware | v < 1.8.3 | 1.8.3 |
| dell latitude_5491_firmware | v < 1.7.4 | 1.7.4 |
| dell latitude_5550_firmware | v < a21 | a21 |
| dell latitude_5580_firmware | v < 1.14.2 | 1.14.2 |
| dell latitude_5590_firmware | v < 1.8.3 | 1.8.3 |
| dell latitude_5591_firmware | v < 1.7.4 | 1.7.4 |
| dell latitude_7202_firmware | v < a23 | a23 |
| dell latitude_7212_firmware | v < 1.25.0 | 1.25.0 |
| dell latitude_7214_firmware | No range specified | — |
| dell latitude_7250_firmware | v < a21 | a21 |
| dell latitude_7275_firmware | v < 1.5.1 | 1.5.1 |
| dell latitude_7280_firmware | v < 1.14.1 | 1.14.1 |
| dell latitude_7285_firmware | v < 1.3.1 | 1.3.1 |
| dell latitude_7290_firmware | v < 1.9.3 | 1.9.3 |
| dell latitude_7350_firmware | v < a18 | a18 |
| dell latitude_7370_firmware | v < 1.17.4 | 1.17.4 |
| dell latitude_7380_firmware | v < 1.14.1 | 1.14.1 |
| dell latitude_7389_firmware | v < 1.17.1 | 1.17.1 |
| dell latitude_7390_firmware | v < 1.9.3 | 1.9.3 |
| dell latitude_7390_2-in-1_firmware | v < 1.8.3 | 1.8.3 |
| dell latitude_7414_firmware | v < 1.23.0 | 1.23.0 |
| dell latitude_7424_rugged_extreme_firmware | v < 1.4.0 | 1.4.0 |
| dell latitude_7480_firmware | v < 1.14.1 | 1.14.1 |
| dell latitude_7490_firmware | v < 1.9.3 | 1.9.3 |
| dell latitude_e5250_firmware | v < a21 | a21 |
| dell latitude_e5270_firmware | v < 1.20.4 | 1.20.4 |
| dell latitude_e5450_firmware | v < a21 | a21 |
| dell latitude_e5470_firmware | v < 1.20.4 | 1.20.4 |
| dell latitude_e5550_firmware | v < a21 | a21 |
| dell latitude_e5570_firmware | v < 1.20.4 | 1.20.4 |
| dell latitude_e7250_firmware | v < a21 | a21 |
| dell latitude_e7270_firmware | v < 1.21.6 | 1.21.6 |
| dell latitude_e7450_firmware | v < a21 | a21 |
| dell latitude_e7470_firmware | v < 1.21.6 | 1.21.6 |
| dell optiplex_3040_firmware | v < 1.10.1 | 1.10.1 |
| dell optiplex_3046_firmware | v < 1.7.0 | 1.7.0 |
| dell optiplex_3050_firmware | v < 1.11.1 | 1.11.1 |
| dell optiplex_3050_aio_firmware | v < 1.12.1 | 1.12.1 |
| dell optiplex_3060_firmware | v < 1.3.4 | 1.3.4 |
| dell optiplex_3240_aio_firmware | v < 1.7.0 | 1.7.0 |
| dell optiplex_5040_firmware | v < 1.13.0 | 1.13.0 |
| dell optiplex_5050_firmware | v < 1.11.1 | 1.11.1 |
| dell optiplex_5060_firmware | v < 1.3.4 | 1.3.4 |
| dell optiplex_5250_aio_firmware | v < 1.12.1 | 1.12.1 |
| dell optiplex_5260_aio_firmware | v < 1.6.4 | 1.6.4 |
| dell optiplex_7040_firmware | v < 1.14.0 | 1.14.0 |
| dell optiplex_7050_firmware | v < 1.11.1 | 1.11.1 |
| dell optiplex_7060_firmware | v < 1.3.4 | 1.3.4 |
| dell optiplex_7440_aio_firmware | v < 1.10.0 | 1.10.0 |
| dell optiplex_7450_aio_firmware | v < 1.12.1 | 1.12.1 |
| dell optiplex_7460_aio_firmware | v < 1.6.4 | 1.6.4 |
| dell optiplex_7760_aio_firmware | v < 1.6.4 | 1.6.4 |
| dell optiplex_xe3_firmware | v < 1.3.4 | 1.3.4 |
| dell precision_3420_firmware | v < 2.12.0 | 2.12.0 |
| dell precision_3430_firmware | v < 1.3.4 | 1.3.4 |
| dell precision_3510_firmware | v < 1.20.4 | 1.20.4 |
| dell precision_3520_firmware | v < 1.14.2 | 1.14.2 |
| dell precision_3530_firmware | v < 1.7.4 | 1.7.4 |
| dell precision_3620_firmware | v < 2.12.0 | 2.12.0 |
| dell precision_3630_firmware | v < 1.1.10 | 1.1.10 |
| dell precision_3930_firmware | v < 1.1.9 | 1.1.9 |
| dell precision_5510_firmware | v < 1.10.0 | 1.10.0 |
| dell precision_5520_firmware | v < 1.14.2 | 1.14.2 |
| dell precision_5530_firmware | v < 1.10.1 | 1.10.1 |
| dell precision_5530_2-in-1_firmware | v < 1.4.8 | 1.4.8 |
| dell precision_5720_aio_firmware | v < 2.4.2 | 2.4.2 |
| dell precision_5820_firmware | v < 1.10.4 | 1.10.4 |
| dell precision_7510_firmware | v < 1.17.7 | 1.17.7 |
| dell precision_7520_firmware | v < 1.14.1 | 1.14.1 |
| dell precision_7530_firmware | v < 1.8.2 | 1.8.2 |
| dell precision_7710_firmware | v < 1.17.7 | 1.17.7 |
| dell precision_7720_firmware | v < 1.14.1 | 1.14.1 |
| dell precision_7820_firmware | v < 1.10.3 | 1.10.3 |
| dell precision_7920_firmware | v < 1.10.3 | 1.10.3 |
| dell precision_t5810_firmware | v < a30 | a30 |
| dell precision_t7810_firmware | v < a30 | a30 |
| dell precision_t7910_firmware | v < a30 | a30 |
| dell venue_7140_firmware | v < a18 | a18 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.