7.6
Élevée
CVE-2019-18579 Settings for the Dell XPS 13 2-in-1 (7390) BIOS versions prior to 1.1.3 contain a configuration vulnerability
Description
Settings for the Dell XPS 13 2-in-1 (7390) BIOS versions prior to 1.1.3 contain a configuration vulnerability. The BIOS configuration for the "Enable Thunderbolt (and PCIe behind TBT) pre-boot modules" setting is enabled by default. A local unauthenticated attacker with physical access to a user's system can obtain read or write access to main memory via a DMA attack during platform boot.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CPG BIOS 1.1 | premières → < 1.1.3 | 1.1.3 |
Autres CVE de CPG BIOS
Les 110 CVE de CPG BIOS →
CVE-2024-0158
Dell BIOS contains an improper input validation vulnerability
5.1
Moyenne
CVE-2024-32855
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component
3.8
Faible
CVE-2024-32860
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
Élevée
CVE-2024-32858
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
Élevée