Threat Investigation
Request a demo

CVE-2024-22429

High

Description

Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.

SeverityHigh
CVSS7.5
Exploit probability—
ProductDell Edge Gateway 5000 Firmware
PublishedMay 17, 2024
First seenMay 17, 2024
Weakness typeCWE-20Improper input validation

How to fix

Update
  • dell edge_gateway_5000_firmware1.28.0 or later
  • dell precision_5820_tower_firmware2.36.0 or later
  • dell edge_gateway_3000_firmware1.18.0 or later
  • dell embedded_box_pc_3000_firmware1.24.0 or later
  • dell embedded_box_pc_5000_firmware1.25.0 or later
  • dell latitude_12_rugged_extreme_7214_firmware1.46.0 or later
  • dell latitude_13_3380_firmware1.27.0 or later
  • dell latitude_3180_firmware1.29.0 or later
  • dell latitude_3189_firmware1.29.0 or later
  • dell latitude_3190_firmware1.34.0 or later
  • dell latitude_3190_2-in-1_firmware1.34.0 or later
  • dell latitude_3300_firmware1.28.0 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
dell edge_gateway_5000_firmwarev < 1.28.01.28.0
dell precision_5820_tower_firmwarev < 2.36.02.36.0
dell edge_gateway_3000_firmwarev < 1.18.01.18.0
dell embedded_box_pc_3000_firmwarev < 1.24.01.24.0
dell embedded_box_pc_5000_firmwarev < 1.25.01.25.0
dell latitude_12_rugged_extreme_7214_firmwarev < 1.46.01.46.0
dell latitude_13_3380_firmwarev < 1.27.01.27.0
dell latitude_3180_firmwarev < 1.29.01.29.0
dell latitude_3189_firmwarev < 1.29.01.29.0
dell latitude_3190_firmwarev < 1.34.01.34.0
dell latitude_3190_2-in-1_firmwarev < 1.34.01.34.0
dell latitude_3300_firmwarev < 1.28.01.28.0
dell latitude_3390_2-in-1_firmwarev < 1.31.01.31.0
dell latitude_5280_firmwarev < 1.36.01.36.0
dell latitude_5288_firmwarev < 1.36.01.36.0
dell latitude_5290_firmwarev < 1.35.01.35.0
dell latitude_5290_2-in-1_firmwarev < 1.34.01.34.0
dell latitude_5400_firmwarev < 1.30.01.30.0
dell latitude_5414_rugged_firmwarev < 1.46.01.46.0
dell latitude_5420_rugged_firmwarev < 1.32.01.32.0
dell latitude_5424_rugged_firmwarev < 1.32.01.32.0
dell latitude_5480_firmwarev < 1.36.01.36.0
dell latitude_5488_firmwarev < 1.36.01.36.0
dell latitude_5490_firmwarev < 1.35.01.35.0
dell latitude_5580_firmwarev < 1.36.01.36.0
dell latitude_5590_firmwarev < 1.35.01.35.0
dell latitude_7212_rugged_extreme_tablet_firmwarev < 1.50.01.50.0
dell latitude_7280_firmwarev < 1.37.01.37.0
dell latitude_7285_2-in-1_firmwarev < 1.26.01.26.0
dell latitude_7290_firmwarev < 1.38.01.38.0
dell latitude_7380_firmwarev < 1.37.01.37.0
dell latitude_7390_firmwarev < 1.38.01.38.0
dell latitude_7390_2-in-1_firmwarev < 1.35.01.35.0
dell latitude_7414_rugged_firmwarev < 1.46.01.46.0
dell latitude_7424_rugged_extreme_firmwarev < 1.32.01.32.0
dell latitude_7480_firmwarev < 1.37.01.37.0
dell latitude_7490_firmwarev < 1.38.01.38.0
dell optiplex_3050_firmwarev < 1.30.01.30.0
dell optiplex_3050_all-in-one_firmwarev < 1.32.01.32.0
dell optiplex_5050_firmwarev < 1.30.01.30.0
dell optiplex_7450_all-in-one_firmwarev < 1.32.01.32.0
dell precision_3420_tower_firmwarev < 2.30.02.30.0
dell precision_3520_firmwarev < 1.36.01.36.0
dell precision_3620_tower_firmwarev < 2.30.02.30.0
dell precision_5520_firmwarev < 1.38.01.38.0
dell precision_5530_2-in-1_firmwarev < 1.31.81.31.8
dell precision_7520_firmwarev < 1.36.01.36.0
dell precision_7720_firmwarev < 1.36.01.36.0
dell wyse_5070_firmwarev < 1.31.01.31.0
dell wyse_7040_thin_client_firmwarev < 1.25.01.25.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2024-22429 · Dell Edge Gateway 5000 Firmware · Dark Radar