CVE-2024-47238
High
Description
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.
SeverityHigh
CVSS7.5
Exploit probability—
ProductDell Embedded Box Pc 3000 Firmware
PublishedDec 12, 2024
First seenDec 12, 2024
Weakness typeCWE-20Improper input validation
How to fix
Update
- dell embedded_box_pc_3000_firmware1.25.0 or later
- dell edge_gateway_3001_firmware1.19.0 or later
- dell edge_gateway_3002_firmware1.19.0 or later
- dell edge_gateway_3003_firmware1.19.0 or later
- dell edge_gateway_5000_firmware1.29.0 or later
- dell edge_gateway_5100_firmware1.29.0 or later
- dell edge_gateway_3000_firmware1.19.0 or later
- dell edge_gateway_3200_firmware1.19.0 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell embedded_box_pc_3000_firmware | v < 1.25.0 | 1.25.0 |
| dell edge_gateway_3001_firmware | v < 1.19.0 | 1.19.0 |
| dell edge_gateway_3002_firmware | v < 1.19.0 | 1.19.0 |
| dell edge_gateway_3003_firmware | v < 1.19.0 | 1.19.0 |
| dell edge_gateway_5000_firmware | v < 1.29.0 | 1.29.0 |
| dell edge_gateway_5100_firmware | v < 1.29.0 | 1.29.0 |
| dell edge_gateway_3000_firmware | v < 1.19.0 | 1.19.0 |
| dell edge_gateway_3200_firmware | v < 1.19.0 | 1.19.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.