CVE-2024-32859
High
Description
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
SeverityHigh
CVSS7.5
Exploit probability—
ProductDell Xps 8960 Firmware
PublishedJun 13, 2024
First seenJun 13, 2024
Weakness typeCWE-20Improper input validation
How to fix
Update
- dell xps_8960_firmware2.6.0 or later
- dell xps_8950_firmware1.19.0 or later
- dell inspiron_3502_firmware1.16.0 or later
- dell inspiron_15_3521_firmware1.14.0 or later
- dell inspiron_15_3510_firmware1.19.0 or later
- dell aurora_r16_firmware2.7.0 or later
- dell alienware_x17_r2_firmware1.20.0 or later
- dell alienware_x17_r1_firmware1.22.0 or later
- dell alienware_x15_r2_firmware1.20.0 or later
- dell alienware_x15_r1_firmware1.22.0 or later
- dell alienware_x14_firmware1.18.0 or later
- dell alienware_m17_r4_firmware1.21.0 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell xps_8960_firmware | v < 2.6.0 | 2.6.0 |
| dell xps_8950_firmware | v < 1.19.0 | 1.19.0 |
| dell inspiron_3502_firmware | v < 1.16.0 | 1.16.0 |
| dell inspiron_15_3521_firmware | v < 1.14.0 | 1.14.0 |
| dell inspiron_15_3510_firmware | v < 1.19.0 | 1.19.0 |
| dell aurora_r16_firmware | v < 2.7.0 | 2.7.0 |
| dell alienware_x17_r2_firmware | v < 1.20.0 | 1.20.0 |
| dell alienware_x17_r1_firmware | v < 1.22.0 | 1.22.0 |
| dell alienware_x15_r2_firmware | v < 1.20.0 | 1.20.0 |
| dell alienware_x15_r1_firmware | v < 1.22.0 | 1.22.0 |
| dell alienware_x14_firmware | v < 1.18.0 | 1.18.0 |
| dell alienware_m17_r4_firmware | v < 1.21.0 | 1.21.0 |
| dell alienware_m17_r3_firmware | v < 1.27.0 | 1.27.0 |
| dell alienware_m15_r4_firmware | v < 1.21.0 | 1.21.0 |
| dell alienware_m15_r3_firmware | v < 1.27.0 | 1.27.0 |
| dell alienware_aurora_ryzen_edition_r14_firmware | v < 2.18.0 | 2.18.0 |
| dell alienware_aurora_r15_amd_firmware | v < 1.13.0 | 1.13.0 |
| dell alienware_aurora_r15_firmware | v < 1.12.0 | 1.12.0 |
| dell alienware_aurora_r13_firmware | v < 1.19.0 | 1.19.0 |
| dell alienware_aurora_r12_firmware | v < 1.1.25 | 1.1.25 |
| dell alienware_aurora_r11_firmware | v < 1.0.24 | 1.0.24 |
| dell alienware_aurora_r10_firmware | v < 2.8.0 | 2.8.0 |
| dell alienware_area_51m_r2_firmware | v < 1.26.0 | 1.26.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.