Threat Investigation
Request a demo

CVE-2024-0160

Medium

Description

Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS.

SeverityMedium
CVSS6.8
Exploit probability—
ProductDell Xps 17 9700 Firmware
PublishedJun 12, 2024
First seenJun 12, 2024
Weakness typeCWE-863Incorrect authorization

How to fix

Update
  • dell xps_17_9700_firmware1.30.0 or later
  • dell xps_15_9500_firmware1.31.0 or later
  • dell vostro_7500_firmware1.28.0 or later
  • dell precision_5750_firmware1.30.0 or later
  • dell precision_5550_firmware1.31.0 or later
  • dell latitude_3520_firmware1.36.0 or later
  • dell latitude_3510_firmware1.29.0 or later
  • dell latitude_3420_firmware1.36.0 or later
  • dell latitude_3410_firmware1.29.0 or later
  • dell inspiron_7501_firmware1.28.0 or later
  • dell inspiron_7500_firmware1.28.0 or later
  • dell g7_7700_firmware1.32.0 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
dell xps_17_9700_firmwarev < 1.30.01.30.0
dell xps_15_9500_firmwarev < 1.31.01.31.0
dell vostro_7500_firmwarev < 1.28.01.28.0
dell precision_5750_firmwarev < 1.30.01.30.0
dell precision_5550_firmwarev < 1.31.01.31.0
dell latitude_3520_firmwarev < 1.36.01.36.0
dell latitude_3510_firmwarev < 1.29.01.29.0
dell latitude_3420_firmwarev < 1.36.01.36.0
dell latitude_3410_firmwarev < 1.29.01.29.0
dell inspiron_7501_firmwarev < 1.28.01.28.0
dell inspiron_7500_firmwarev < 1.28.01.28.0
dell g7_7700_firmwarev < 1.32.01.32.0
dell g7_7500_firmwarev < 1.32.01.32.0
dell g5_5500_firmwarev < 1.30.01.30.0
dell g3_3500_firmwarev < 1.30.01.30.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.