CVE-2024-28970
Medium
Description
Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of service.
SeverityMedium
CVSS4.7
Exploit probability—
ProductDell Vostro 5502 Firmware
PublishedJun 12, 2024
First seenJun 12, 2024
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- dell vostro_5502_firmware1.30.0 or later
- dell vostro_5402_firmware1.30.0 or later
- dell precision_3660_firmware2.14.0 or later
- dell inspiron_5509_firmware1.30.0 or later
- dell inspiron_5502_firmware1.30.0 or later
- dell inspiron_5409_firmware1.30.0 or later
- dell inspiron_5402_firmware1.30.0 or later
- dell inspiron_27_7720_all-in-one_firmware1.11.0 or later
- dell inspiron_24_5420_all-in-one_firmware1.11.0 or later
- dell inspiron_16_plus_7640_firmware1.6.0 or later
- dell inspiron_16_7640_2-in-1_firmware1.4.0 or later
- dell inspiron_14_plus_7440_firmware1.6.0 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell vostro_5502_firmware | v < 1.30.0 | 1.30.0 |
| dell vostro_5402_firmware | v < 1.30.0 | 1.30.0 |
| dell precision_3660_firmware | v < 2.14.0 | 2.14.0 |
| dell inspiron_5509_firmware | v < 1.30.0 | 1.30.0 |
| dell inspiron_5502_firmware | v < 1.30.0 | 1.30.0 |
| dell inspiron_5409_firmware | v < 1.30.0 | 1.30.0 |
| dell inspiron_5402_firmware | v < 1.30.0 | 1.30.0 |
| dell inspiron_27_7720_all-in-one_firmware | v < 1.11.0 | 1.11.0 |
| dell inspiron_24_5420_all-in-one_firmware | v < 1.11.0 | 1.11.0 |
| dell inspiron_16_plus_7640_firmware | v < 1.6.0 | 1.6.0 |
| dell inspiron_16_7640_2-in-1_firmware | v < 1.4.0 | 1.4.0 |
| dell inspiron_14_plus_7440_firmware | v < 1.6.0 | 1.6.0 |
| dell g7_7700_firmware | v < 1.32.0 | 1.32.0 |
| dell g7_7500_firmware | v < 1.32.0 | 1.32.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.