CVE-2024-39584
High
Description
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.
SeverityHigh
CVSS8.2
Exploit probability—
ProductDell Xps 8960 Firmware
PublishedAug 28, 2024
First seenAug 28, 2024
Weakness typeCWE-1392CWE-1392
How to fix
Update
- dell xps_8960_firmware2.12.0 or later
- dell xps_8950_firmware1.21.0 or later
- dell inspiron_3502_firmware1.18.0 or later
- dell inspiron_15_3521_firmware1.16.0 or later
- dell inspiron_15_3510_firmware1.21.0 or later
- dell aurora_r16_firmware2.13.0 or later
- dell alienware_x17_r2_firmware1.22.0 or later
- dell alienware_x17_r1_firmware1.24.0 or later
- dell alienware_x15_r2_firmware1.22.0 or later
- dell alienware_x15_r1_firmware1.24.0 or later
- dell alienware_x14_firmware1.21.0 or later
- dell alienware_m17_r4_firmware1.24.0 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell xps_8960_firmware | v < 2.12.0 | 2.12.0 |
| dell xps_8950_firmware | v < 1.21.0 | 1.21.0 |
| dell inspiron_3502_firmware | v < 1.18.0 | 1.18.0 |
| dell inspiron_15_3521_firmware | v < 1.16.0 | 1.16.0 |
| dell inspiron_15_3510_firmware | v < 1.21.0 | 1.21.0 |
| dell aurora_r16_firmware | v < 2.13.0 | 2.13.0 |
| dell alienware_x17_r2_firmware | v < 1.22.0 | 1.22.0 |
| dell alienware_x17_r1_firmware | v < 1.24.0 | 1.24.0 |
| dell alienware_x15_r2_firmware | v < 1.22.0 | 1.22.0 |
| dell alienware_x15_r1_firmware | v < 1.24.0 | 1.24.0 |
| dell alienware_x14_firmware | v < 1.21.0 | 1.21.0 |
| dell alienware_m17_r4_firmware | v < 1.24.0 | 1.24.0 |
| dell alienware_m17_r3_firmware | v < 1.29.0 | 1.29.0 |
| dell alienware_m15_r4_firmware | v < 1.24.0 | 1.24.0 |
| dell alienware_m15_r3_firmware | v < 1.29.0 | 1.29.0 |
| dell alienware_aurora_ryzen_edition_r14_firmware | v < 2.19.1 | 2.19.1 |
| dell alienware_aurora_r15_amd_firmware | v < 1.15.0 | 1.15.0 |
| dell alienware_aurora_r15_firmware | v < 1.17.0 | 1.17.0 |
| dell alienware_aurora_r13_firmware | v < 1.21.0 | 1.21.0 |
| dell alienware_area_51m_r2_firmware | v < 1.29.0 | 1.29.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.