Описание
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.
Затрагиваемое ПО
Dell Edge gateway 5000 firmwareDell Edge gateway 5000Dell Precision 5820 tower firmwareDell Precision 5820 towerDell Edge gateway 3000 firmwareDell Edge gateway 3000Dell Embedded box pc 3000 firmwareDell Embedded box pc 3000Dell Embedded box pc 5000 firmwareDell Embedded box pc 5000Dell Latitude 12 rugged extreme 7214 firmwareDell Latitude 12 rugged extreme 7214Dell Latitude 13 3380 firmwareDell Latitude 13 3380Dell Latitude 3180 firmwareDell Latitude 3180Dell Latitude 3189 firmwareDell Latitude 3189Dell Latitude 3190 firmwareDell Latitude 3190Dell Latitude 3190 2-in-1 firmwareDell Latitude 3190 2-in-1Dell Latitude 3300 firmwareDell Latitude 3300Dell Latitude 3390 2-in-1 firmware
CVSS
| Балл | 7.5 — высокая |
| Вектор | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
Источники
https://www.dell.com/support/kbdoc/en-us/000221102/dsa-2024-020https://www.dell.com/support/kbdoc/en-us/000221102/dsa-2024-020