CVE-2024-0158

Medium

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges

SeverityMedium

CVSS5.1

Exploit probability—

ProductDell Alienware M15 R6 Firmware

PublishedJul 2, 2024

First seenJul 2, 2024

Weakness typeCWE-20Improper input validation

How to fix

Update

dell alienware_m15_r6_firmware1.28.0 or later
dell alienware_m15_r7_firmware1.28.0 or later
dell alienware_m16_r1_firmware1.15.0 or later
dell alienware_m18_r1_firmware1.15.0 or later
dell alienware_m18_r2_firmware1.2.1 or later
dell alienware_x14_r2_firmware1.12.1 or later
dell alienware_x16_r1_firmware1.12.1 or later
dell alienware_x16_r2_firmware1.2.0 or later
dell chengming_3900_firmware1.20.0 or later
dell chengming_3910_firmware1.12.0 or later
dell chengming_3911_firmware1.12.0 or later
dell chengming_3990_firmware1.26.0 or later

Vendor advisories

dell.com/support/kbdoc/en-in/000220141/dsa-2024-030-security-update-for-dell-client-bios-for-an-improper-input-validation-vulnerability

Affected products

Product	Affected versions	Fixed in
dell alienware_m15_r6_firmware	v < 1.28.0	1.28.0
dell alienware_m15_r7_firmware	v < 1.28.0	1.28.0
dell alienware_m16_r1_firmware	v < 1.15.0	1.15.0
dell alienware_m18_r1_firmware	v < 1.15.0	1.15.0
dell alienware_m18_r2_firmware	v < 1.2.1	1.2.1
dell alienware_x14_r2_firmware	v < 1.12.1	1.12.1
dell alienware_x16_r1_firmware	v < 1.12.1	1.12.1
dell alienware_x16_r2_firmware	v < 1.2.0	1.2.0
dell chengming_3900_firmware	v < 1.20.0	1.20.0
dell chengming_3910_firmware	v < 1.12.0	1.12.0
dell chengming_3911_firmware	v < 1.12.0	1.12.0
dell chengming_3990_firmware	v < 1.26.0	1.26.0
dell chengming_3991_firmware	v < 1.26.0	1.26.0
dell edge_gateway_5000_firmware	v < 1.27.0	1.27.0
dell g15_5510_firmware	v < 1.23.0	1.23.0
dell g15_5511_firmware	v < 1.27.0	1.27.0
dell g15_5520_firmware	v < 1.23.0	1.23.0
dell g15_5530_firmware	v < 1.13.0	1.13.0
dell g16_7620_firmware	v < 1.23.0	1.23.0
dell g16_7630_firmware	v < 1.13.0	1.13.0
dell g3_3500_firmware	v < 1.29.0	1.29.0
dell g5_5000_firmware	v < 1.19.0	1.19.0
dell g5_5090_firmware	v < 1.25.0	1.25.0
dell g5_5500_firmware	v < 1.29.0	1.29.0
dell g7_7500_firmware	v < 1.31.0	1.31.0
dell g7_7700_firmware	v < 1.31.0	1.31.0
dell precision_3430_tower_firmware	v < 1.29.0	1.29.0
dell precision_3431_tower_firmware	v < 1.25.0	1.25.0
dell precision_3630_tower_firmware	v < 2.27.0	2.27.0
dell precision_5820_tower_firmware	v < 2.35.0	2.35.0
dell precision_7820_tower_firmware	v < 2.39.0	2.39.0
dell precision_7920_tower_firmware	v < 2.39.0	2.39.0
dell edge_gateway_3000_firmware	v < 1.17.0	1.17.0
dell embedded_box_pc_3000_firmware	v < 1.23.0	1.23.0
dell embedded_box_pc_5000_firmware	v < 1.24.0	1.24.0
dell inspiron_13_5310_firmware	v < 2.26.0	2.26.0
dell inspiron_13_5320_firmware	v < 1.17.0	1.17.0
dell inspiron_13_5330_firmware	v < 1.13.1	1.13.1
dell inspiron_14_5410_firmware	v < 2.25.0	2.25.0
dell inspiron_14_5418_firmware	v < 2.25.0	2.25.0
dell inspiron_14_5420_firmware	v < 1.20.0	1.20.0
dell inspiron_14_5430_firmware	v < 1.12.0	1.12.0
dell inspiron_14_5440_firmware	v < 1.3.1	1.3.1
dell inspiron_14_7420_2-in-1_firmware	v < 1.18.0	1.18.0
dell inspiron_14_7430_2-in-1_firmware	v < 1.12.0	1.12.0
dell inspiron_14_7440_2-in-1_firmware	v < 1.3.1	1.3.1
dell inspiron_14_plus_7420_firmware	v < 1.21.0	1.21.0
dell inspiron_14_plus_7430_firmware	v < 1.13.0	1.13.0
dell inspiron_15_3511_firmware	v < 1.27.0	1.27.0
dell inspiron_15_3520_firmware	v < 1.22.0	1.22.0
dell inspiron_15_3530_firmware	v < 1.9.0	1.9.0
dell inspiron_15_5510_firmware	v < 2.25.0	2.25.0
dell inspiron_15_5518_firmware	v < 2.25.0	2.25.0
dell inspiron_15_7510_firmware	v < 1.22.0	1.22.0
dell inspiron_16_5620_firmware	v < 1.20.0	1.20.0
dell inspiron_16_5630_firmware	v < 1.12.0	1.12.0
dell inspiron_16_5640_firmware	v < 1.2.1	1.2.1
dell inspiron_16_7610_firmware	v < 1.22.0	1.22.0
dell inspiron_16_7620_2-in-1_firmware	v < 1.18.0	1.18.0
dell inspiron_16_7630_2-in-1_firmware	v < 1.12.0	1.12.0
dell inspiron_16_plus_7620_firmware	v < 1.21.0	1.21.0
dell inspiron_16_plus_7630_firmware	v < 1.13.0	1.13.0
dell inspiron_24_5410_all-in-one_firmware	v < 1.19.0	1.19.0
dell inspiron_24_5411_all-in-one_firmware	v < 1.19.0	1.19.0
dell inspiron_24_5420_all-in-one_firmware	v < 1.9.0	1.9.0
dell inspiron_27_7710_all-in-one_firmware	v < 1.19.0	1.19.0
dell inspiron_27_7720_all-in-one_firmware	v < 1.9.0	1.9.0
dell inspiron_3020_desktop_firmware	v < 1.12.0	1.12.0
dell inspiron_3020_small_desktop_firmware	v < 1.12.0	1.12.0
dell inspiron_3030s_firmware	v < 1.3.0	1.3.0
dell inspiron_3480_firmware	v < 1.29.0	1.29.0
dell inspiron_3493_firmware	v < 1.30.0	1.30.0
dell inspiron_3501_firmware	v < 1.29.0	1.29.0
dell inspiron_3580_firmware	v < 1.29.0	1.29.0
dell inspiron_3593_firmware	v < 1.30.0	1.30.0
dell inspiron_3793_firmware	v < 1.30.0	1.30.0
dell inspiron_3880_firmware	v < 1.26.0	1.26.0
dell inspiron_3881_firmware	v < 1.26.0	1.26.0
dell inspiron_3891_firmware	v < 1.23.0	1.23.0
dell inspiron_3910_firmware	v < 1.20.0	1.20.0
dell inspiron_5301_firmware	v < 1.32.0	1.32.0
dell inspiron_5400_firmware	v < 1.26.0	1.26.0
dell inspiron_5401_firmware	v < 1.26.0	1.26.0
dell inspiron_5401_aio_firmware	v < 1.26.0	1.26.0
dell inspiron_5402_firmware	v < 1.29.0	1.29.0
dell inspiron_5406_2-in-1_firmware	v < 1.29.0	1.29.0
dell inspiron_5409_firmware	v < 1.29.0	1.29.0
dell inspiron_5410_firmware	v < 2.25.0	2.25.0
dell inspiron_5493_firmware	v < 1.30.0	1.30.0
dell inspiron_5502_firmware	v < 1.29.0	1.29.0
dell inspiron_5509_firmware	v < 1.29.0	1.29.0
dell inspiron_5593_firmware	v < 1.30.0	1.30.0
dell inspiron_7300_firmware	v < 1.32.0	1.32.0
dell inspiron_7306_2-in-1_firmware	v < 1.29.0	1.29.0
dell inspiron_7400_firmware	v < 1.32.0	1.32.0
dell inspiron_7490_firmware	v < 1.25.0	1.25.0
dell inspiron_7500_firmware	v < 1.27.0	1.27.0
dell inspiron_7501_firmware	v < 1.27.0	1.27.0
dell inspiron_7506_2-in-1_firmware	v < 1.29.0	1.29.0
dell inspiron_7700_all-in-one_firmware	v < 1.26.0	1.26.0
dell inspiron_7706_2-in-1_firmware	v < 1.29.0	1.29.0
dell latitude_12_rugged_extreme_7214_firmware	v < 1.45.0	1.45.0
dell latitude_3380_firmware	v < 1.26.0	1.26.0
dell latitude_3120_firmware	v < 1.24.0	1.24.0
dell latitude_3140_firmware	v < 1.13.0	1.13.0
dell latitude_3180_firmware	v < 1.28.0	1.28.0
dell latitude_3189_firmware	v < 1.28.0	1.28.0
dell latitude_3190_firmware	v < 1.33.0	1.33.0
dell latitude_3190_2-in-1_firmware	v < 1.33.0	1.33.0
dell latitude_3300_firmware	v < 1.27.0	1.27.0
dell latitude_3301_firmware	v < 1.30.0	1.30.0
dell latitude_3310_firmware	v < 1.24.0	1.24.0
dell latitude_3310_2-in-1_firmware	v < 1.23.0	1.23.0
dell latitude_3320_firmware	v < 1.28.0	1.28.0
dell latitude_3330_firmware	v < 1.20.0	1.20.0
dell latitude_3340_firmware	v < 1.11.0	1.11.0
dell latitude_3390_2-in-1_firmware	v < 1.30.0	1.30.0
dell latitude_3400_firmware	v < 1.32.0	1.32.0
dell latitude_3410_firmware	v < 1.28.0	1.28.0
dell latitude_3420_firmware	v < 1.35.0	1.35.0
dell latitude_3430_firmware	v < 1.17.0	1.17.0
dell latitude_3440_firmware	v < 1.11.0	1.11.0
dell latitude_3500_firmware	v < 1.32.0	1.32.0
dell latitude_3510_firmware	v < 1.28.0	1.28.0
dell latitude_3520_firmware	v < 1.35.0	1.35.0
dell latitude_3530_firmware	v < 1.17.0	1.17.0
dell latitude_3540_firmware	v < 1.11.0	1.11.0
dell latitude_5280_firmware	v < 1.35.0	1.35.0
dell latitude_5288_firmware	v < 1.35.0	1.35.0
dell latitude_5290_firmware	v < 1.34.0	1.34.0
dell latitude_5290_2-in-1_firmware	v < 1.33.0	1.33.0
dell latitude_5300_firmware	v < 1.30.0	1.30.0
dell latitude_5300_2-in-1_firmware	v < 1.30.0	1.30.0
dell latitude_5310_firmware	v < 1.23.0	1.23.0
dell latitude_5310_2-in-1_firmware	v < 1.23.0	1.23.0
dell latitude_5320_firmware	v < 1.36.0	1.36.0
dell latitude_5330_firmware	v < 1.20.0	1.20.0
dell latitude_5340_firmware	v < 1.11.0	1.11.0
dell latitude_5400_firmware	v < 1.29.0	1.29.0
dell latitude_5401_firmware	v < 1.30.0	1.30.0
dell latitude_5410_firmware	v < 1.26.0	1.26.0
dell latitude_5411_firmware	v < 1.27.0	1.27.0
dell latitude_5414_rugged_firmware	v < 1.45.0	1.45.0
dell latitude_5420_firmware	v < 1.36.2	1.36.2
dell latitude_5420_rugged_firmware	v < 1.31.0	1.31.0
dell latitude_5421_firmware	v < 1.28.0	1.28.0
dell latitude_5424_rugged_firmware	v < 1.31.0	1.31.0
dell latitude_5430_firmware	v < 1.21.0	1.21.0
dell latitude_5430_rugged_firmware	v < 1.25.1	1.25.1
dell latitude_5431_firmware	v < 1.20.0	1.20.0
dell latitude_5440_firmware	v < 1.12.0	1.12.0
dell latitude_5480_firmware	v < 1.35.0	1.35.0
dell latitude_5488_firmware	v < 1.35.0	1.35.0
dell latitude_5490_firmware	v < 1.34.0	1.34.0
dell latitude_5491_firmware	v < 1.32.0	1.32.0
dell latitude_5495_firmware	v < 1.15.0	1.15.0
dell latitude_5500_firmware	v < 1.29.0	1.29.0
dell latitude_5501_firmware	v < 1.30.0	1.30.0
dell latitude_5510_firmware	v < 1.26.0	1.26.0
dell latitude_5511_firmware	v < 1.27.0	1.27.0
dell latitude_5520_firmware	v < 1.36.0	1.36.0
dell latitude_5521_firmware	v < 1.29.0	1.29.0
dell latitude_5530_firmware	v < 1.21.1	1.21.1
dell latitude_5531_firmware	v < 1.21.0	1.21.0
dell latitude_5540_firmware	v < 1.11.0	1.11.0
dell latitude_5580_firmware	v < 1.35.0	1.35.0
dell latitude_5590_firmware	v < 1.34.0	1.34.0
dell latitude_5591_firmware	v < 1.32.0	1.32.0
dell latitude_7030_rugged_extreme_firmware	v < 1.4.1	1.4.1
dell latitude_7200_2-in-1_firmware	v < 1.28.0	1.28.0
dell latitude_7210_2-in-1_firmware	v < 1.28.0	1.28.0
dell latitude_7212_rugged_extreme_tablet_firmware	v < 1.49.0	1.49.0
dell latitude_7220_rugged_extreme_firmware	v < 1.35.0	1.35.0
dell latitude_7230_rugged_extreme_firmware	v < 1.13.1	1.13.1
dell latitude_7280_firmware	v < 1.36.0	1.36.0
dell latitude_7285_2-in-1_firmware	v < 1.25.0	1.25.0
dell latitude_7290_firmware	v < 1.37.0	1.37.0
dell latitude_7300_firmware	v < 1.30.0	1.30.0
dell latitude_7310_firmware	v < 1.28.0	1.28.0
dell latitude_7320_firmware	v < 1.34.2	1.34.2
dell latitude_7320_detachable_firmware	v < 1.29.0	1.29.0
dell latitude_7330_firmware	v < 1.21.0	1.21.0
dell latitude_7330_rugged_laptop_firmware	v < 1.25.1	1.25.1
dell latitude_7340_firmware	v < 1.12.1	1.12.1
dell latitude_7380_firmware	v < 1.36.0	1.36.0
dell latitude_7390_firmware	v < 1.37.0	1.37.0
dell latitude_7390_2-in-1_firmware	v < 1.34.0	1.34.0
dell latitude_7400_firmware	v < 1.30.0	1.30.0
dell latitude_7400_2-in-1_firmware	v < 1.27.0	1.27.0
dell latitude_7410_firmware	v < 1.28.0	1.28.0
dell latitude_7414_rugged_firmware	v < 1.45.0	1.45.0
dell latitude_7420_firmware	v < 1.34.2	1.34.2
dell latitude_7424_rugged_extreme_firmware	v < 1.31.0	1.31.0
dell latitude_7430_firmware	v < 1.21.0	1.21.0
dell latitude_7440_firmware	v < 1.12.0	1.12.0
dell latitude_7480_firmware	v < 1.36.0	1.36.0
dell latitude_7490_firmware	v < 1.37.0	1.37.0
dell latitude_7520_firmware	v < 1.34.2	1.34.2
dell latitude_7530_firmware	v < 1.21.0	1.21.0
dell latitude_7640_firmware	v < 1.12.0	1.12.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

ProductVersion

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.