8.2
High
CVE-2024-39584 Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability
Description
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Client Platform BIOS 1.29 | earliest → < 1.29.0 | 1.29.0 |
| Dell Client Platform BIOS 1.24 | earliest → < 1.24.0 | 1.24.0 |
| Dell Client Platform BIOS 1.21 | earliest → < 1.21.0 | 1.21.0 |
| Dell Client Platform BIOS 1.15 | earliest → < 1.15.0 | 1.15.0 |
| alienware_m17_r3_firmware 1.29 | earliest → < 1.29.0 | 1.29.0 |
| alienware_aurora_r15_amd_firmware 1.15 | earliest → < 1.15.0 | 1.15.0 |
| alienware_x14_firmware 1.21 | earliest → < 1.21.0 | 1.21.0 |
| alienware_x15_r1_firmware 1.24 | earliest → < 1.24.0 | 1.24.0 |
Other CVEs of Dell Client Platform BIOS
The 7 CVEs of Dell Client Platform BIOS →
CVE-2025-29989
Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability
3.1
Low
CVE-2025-29988
Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability
6.9
Medium
CVE-2024-52541
Dell Client Platform BIOS contains a Weak Authentication vulnerability
8.2
High
CVE-2024-47238
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
High