8.2
Élevée
CVE-2024-39584 Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability
Description
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dell Client Platform BIOS 1.29 | premières → < 1.29.0 | 1.29.0 |
| Dell Client Platform BIOS 1.24 | premières → < 1.24.0 | 1.24.0 |
| Dell Client Platform BIOS 1.21 | premières → < 1.21.0 | 1.21.0 |
| Dell Client Platform BIOS 1.15 | premières → < 1.15.0 | 1.15.0 |
| alienware_m17_r3_firmware 1.29 | premières → < 1.29.0 | 1.29.0 |
| alienware_aurora_r15_amd_firmware 1.15 | premières → < 1.15.0 | 1.15.0 |
| alienware_x14_firmware 1.21 | premières → < 1.21.0 | 1.21.0 |
| alienware_x15_r1_firmware 1.24 | premières → < 1.24.0 | 1.24.0 |
Autres CVE de Dell Client Platform BIOS
Les 7 CVE de Dell Client Platform BIOS →
CVE-2025-29989
Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability
3.1
Faible
CVE-2025-29988
Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability
6.9
Moyenne
CVE-2024-52541
Dell Client Platform BIOS contains a Weak Authentication vulnerability
8.2
Élevée
CVE-2024-47238
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
Élevée