5.1
Medium
CVE-2024-0158 Dell BIOS contains an improper input validation vulnerability
Description
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CPG BIOS 3.21 | earliest → < 3.21.0 | 3.21.0 |
| CPG BIOS 3.3 | earliest → < 3.3.2 | 3.3.2 |
| CPG BIOS 2.39 | earliest → < 2.39.0 | 2.39.0 |
| CPG BIOS 2.35 | earliest → < 2.35.0 | 2.35.0 |
| CPG BIOS 2.30 | earliest → < 2.30.0 | 2.30.0 |
| CPG BIOS 2.29 | earliest → < 2.29.0 | 2.29.0 |
| CPG BIOS 2.27 | earliest → < 2.27.0 | 2.27.0 |
| CPG BIOS 2.26 | earliest → < 2.26.0 | 2.26.0 |
| CPG BIOS 2.25 | earliest → < 2.25.0 | 2.25.0 |
Show the 42 other branches Hide the 42 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| CPG BIOS 2.24 | earliest → < 2.24.0 | 2.24.0 |
| CPG BIOS 2.23 | earliest → < 2.23.0 | 2.23.0 |
| CPG BIOS 2.18 | earliest → < 2.18.1 | 2.18.0 |
| CPG BIOS 2.12 | earliest → < 2.12.0 | 2.12.0 |
| CPG BIOS 2.10 | earliest → < 2.10.0 | 2.10.0 |
| CPG BIOS 1.49 | earliest → < 1.49.0 | 1.49.0 |
| CPG BIOS 1.45 | earliest → < 1.45.0 | 1.45.0 |
| CPG BIOS 1.37 | earliest → < 1.37.0 | 1.37.0 |
| CPG BIOS 1.36 | earliest → < 1.36.2 | 1.36.0 |
| CPG BIOS 1.35 | earliest → < 1.35.0 | 1.35.0 |
| CPG BIOS 1.34 | earliest → < 1.34.2 | 1.34.0 |
| CPG BIOS 1.33 | earliest → < 1.33.0 | 1.33.0 |
| CPG BIOS 1.32 | earliest → < 1.32.0 | 1.32.0 |
| CPG BIOS 1.31 | earliest → < 1.31.0 | 1.31.0 |
| CPG BIOS 1.30 | earliest → < 1.30.8 | 1.30.0 |
| CPG BIOS 1.29 | earliest → < 1.29.0 | 1.29.0 |
| CPG BIOS 1.28 | earliest → < 1.28.0 | 1.28.0 |
| CPG BIOS 1.27 | earliest → < 1.27.0 | 1.27.0 |
| CPG BIOS 1.26 | earliest → < 1.26.1 | 1.26.0 |
| CPG BIOS 1.25 | earliest → < 1.25.1 | 1.25.0 |
| CPG BIOS 1.24 | earliest → < 1.24.0 | 1.24.0 |
| CPG BIOS 1.23 | earliest → < 1.23.0 | 1.23.0 |
| CPG BIOS 1.22 | earliest → < 1.22.0 | 1.22.0 |
| CPG BIOS 1.21 | earliest → < 1.21.1 | 1.21.0 |
| CPG BIOS 1.20 | earliest → < 1.20.1 | 1.20.0 |
| CPG BIOS 1.19 | earliest → < 1.19.1 | 1.19.0 |
| CPG BIOS 1.18 | earliest → < 1.18.0 | 1.18.0 |
| CPG BIOS 1.17 | earliest → < 1.17.0 | 1.17.0 |
| CPG BIOS 1.16 | earliest → < 1.16.1 | 1.16.1 |
| CPG BIOS 1.15 | earliest → < 1.15.0 | 1.15.0 |
| CPG BIOS 1.14 | earliest → < 1.14.0 | 1.14.0 |
| CPG BIOS 1.13 | earliest → < 1.13.1 | 1.13.0 |
| CPG BIOS 1.12 | earliest → < 1.12.1 | 1.12.1 |
| CPG BIOS 1.11 | earliest → < 1.11.0 | 1.11.0 |
| CPG BIOS 1.10 | earliest → < 1.10.0 | 1.10.0 |
| CPG BIOS 1.9 | earliest → < 1.9.0 | 1.9.0 |
| CPG BIOS 1.7 | earliest → < 1.7.0 | 1.7.0 |
| CPG BIOS 1.4 | earliest → < 1.4.1 | 1.4.1 |
| CPG BIOS 1.3 | earliest → < 1.3.1 | 1.3.1 |
| CPG BIOS 01.03 | earliest → < 01.03.00 | 01.03.00 |
| CPG BIOS 1.2 | earliest → < 1.2.1 | 1.2.1 |
| CPG BIOS 1.1 | earliest → < 1.1.38 | 1.1.38 |
Other CVEs of CPG BIOS
The 110 CVEs of CPG BIOS →
CVE-2024-32855
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component
3.8
Low
CVE-2024-32860
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
High
CVE-2024-32858
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
High
CVE-2024-32859
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
High