CVE-2024-38296

Medium

Description

Dell Edge Gateway 3200, versions prior to 15.40.30.2879, and Edge Gateway 5200, versions prior to 12.0.94.2380, contain an Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

SeverityMedium

CVSS6.7

Exploit probability—

ProductDell Intel Management Engine Firmware Update Utility

PublishedNov 22, 2024

First seenNov 22, 2024

Weakness typeCWE-1421CWE-1421

How to fix

Update

dell intel_management_engine_firmware_update_utility15.40.30.2879, 12.0.94.2380 or later

Vendor advisories

dell.com/support/kbdoc/en-us/000250949/dsa-2024-345-security-update-for-dell-networking-edge-gateway-5200-vulnerability

Affected products

Product	Affected versions	Fixed in
dell intel_management_engine_firmware_update_utility	v < 15.40.30.2879, v < 12.0.94.2380	15.40.30.2879, 12.0.94.2380

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.