Threat Investigation
Request a demo

CVE-2024-38483

Medium

Description

Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

SeverityMedium
CVSS5.8
Exploit probability—
ProductDell Latitude 5290 2-in-1 Firmware
PublishedAug 14, 2024
First seenAug 14, 2024
Weakness typeCWE-20Improper input validation

How to fix

Update
  • dell latitude_5290_2-in-1_firmware1.35.0 or later
  • dell precision_3420_tower_firmware2.32.0 or later
  • dell precision_3620_firmware2.32.0 or later
  • dell wyse_7040_thin_client_firmware1.26.0 or later
  • dell precision_7720_firmware1.37.0 or later
  • dell precision_5530_2-in-1_firmware1.32.8 or later
  • dell precision_5520_firmware1.39.0 or later
  • dell precision_3520_firmware1.37.0 or later
  • dell optiplex_7450_all-in-one_firmware1.34.0 or later
  • dell optiplex_5050_firmware1.31.0 or later
  • dell optiplex_3050_all-in-one_firmware1.34.0 or later
  • dell optiplex_3050_firmware1.31.0 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
dell latitude_5290_2-in-1_firmwarev < 1.35.01.35.0
dell precision_3420_tower_firmwarev < 2.32.02.32.0
dell precision_3620_firmwarev < 2.32.02.32.0
dell wyse_7040_thin_client_firmwarev < 1.26.01.26.0
dell precision_7720_firmwarev < 1.37.01.37.0
dell precision_7520_firmware1.37.0—
dell precision_5530_2-in-1_firmwarev < 1.32.81.32.8
dell precision_5520_firmwarev < 1.39.01.39.0
dell precision_3520_firmwarev < 1.37.01.37.0
dell optiplex_7450_all-in-one_firmwarev < 1.34.01.34.0
dell optiplex_5050_firmwarev < 1.31.01.31.0
dell optiplex_3050_all-in-one_firmwarev < 1.34.01.34.0
dell optiplex_3050_firmwarev < 1.31.01.31.0
dell latitude_7490_firmwarev < 1.39.01.39.0
dell latitude_7480_firmwarev < 1.38.01.38.0
dell latitude_7424_rugged_extreme_firmwarev < 1.34.01.34.0
dell latitude_7414_rugged_firmwarev < 1.47.01.47.0
dell latitude_7390_2-in-1_firmwarev < 1.36.01.36.0
dell latitude_7390_firmwarev < 1.39.01.39.0
dell latitude_7380_firmwarev < 1.38.01.38.0
dell latitude_7290_firmwarev < 1.39.01.39.0
dell latitude_7285_2-in-1_firmwarev < 1.27.01.27.0
dell latitude_7280_firmwarev < 1.38.01.38.0
dell latitude_7212_rugged_extreme_tablet_firmwarev < 1.51.01.51.0
dell latitude_5590_firmwarev < 1.36.01.36.0
dell latitude_5580_firmwarev < 1.37.01.37.0
dell latitude_5490_firmwarev < 1.36.01.36.0
dell latitude_5488_firmwarev < 1.37.01.37.0
dell latitude_5480_firmwarev < 1.37.01.37.0
dell latitude_5424_rugged_firmwarev < 1.34.01.34.0
dell latitude_5420_rugged_firmwarev < 1.34.01.34.0
dell latitude_5414_rugged_firmwarev < 1.47.01.47.0
dell latitude_5400_firmwarev < 1.32.01.32.0
dell latitude_5290_firmwarev < 1.36.01.36.0
dell latitude_5288_firmwarev < 1.37.01.37.0
dell latitude_5280_firmwarev < 1.37.01.37.0
dell latitude_3390_2-in-1_firmwarev < 1.32.01.32.0
dell latitude_3300_firmwarev < 1.29.01.29.0
dell latitude_13_3380_firmwarev < 1.28.01.28.0
dell latitude_12_rugged_extreme_7214_firmwarev < 1.47.01.47.0
dell embedded_box_pc_5000_firmwarev < 1.26.01.26.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.