HIGH🇵🇱 Wersja polska

CVE-2024-22429

CVSS 7.5v3.1pub. 2024-05-17upd. 2025-01-30

Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.

CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

  • Dell Edge Gateway 3000

    HW
    Dell
    all versions

  • Dell Edge Gateway 3000 Firmware

    OS
    Dell
    < 1.18.0

  • Dell Edge Gateway 5000

    HW
    Dell
    all versions

  • Dell Edge Gateway 5000 Firmware

    OS
    Dell
    < 1.28.0

  • Dell Embedded Box Pc 3000

    HW
    Dell
    all versions

  • Dell Embedded Box Pc 3000 Firmware

    OS
    Dell
    < 1.24.0

  • Dell Embedded Box Pc 5000

    HW
    Dell
    all versions

  • Dell Embedded Box Pc 5000 Firmware

    OS
    Dell
    < 1.25.0

  • Dell Latitude 12 Rugged Extreme 7214

    HW
    Dell
    all versions

  • Dell Latitude 12 Rugged Extreme 7214 Firmware

    OS
    Dell
    < 1.46.0

  • Dell Latitude 13 3380

    HW
    Dell
    all versions

  • Dell Latitude 13 3380 Firmware

    OS
    Dell
    < 1.27.0

  • Dell Latitude 3180

    HW
    Dell
    all versions

  • Dell Latitude 3180 Firmware

    OS
    Dell
    < 1.29.0

  • Dell Latitude 3189

    HW
    Dell
    all versions

  • Dell Latitude 3189 Firmware

    OS
    Dell
    < 1.29.0

  • Dell Latitude 3190

    HW
    Dell
    all versions

  • Dell Latitude 3190 2 In 1

    HW
    Dell
    all versions

  • Dell Latitude 3190 2 In 1 Firmware

    OS
    Dell
    < 1.34.0

  • Dell Latitude 3190 Firmware

    OS
    Dell
    < 1.34.0

  • Dell Latitude 3300

    HW
    Dell
    all versions

  • Dell Latitude 3300 Firmware

    OS
    Dell
    < 1.28.0

  • Dell Latitude 3390 2 In 1

    HW
    Dell
    all versions

  • Dell Latitude 3390 2 In 1 Firmware

    OS
    Dell
    < 1.31.0

  • Dell Latitude 5280

    HW
    Dell
    all versions

  • Dell Latitude 5280 Firmware

    OS
    Dell
    < 1.36.0

  • Dell Latitude 5288

    HW
    Dell
    all versions

  • Dell Latitude 5288 Firmware

    OS
    Dell
    < 1.36.0

  • Dell Latitude 5290

    HW
    Dell
    all versions

  • Dell Latitude 5290 2 In 1

    HW
    Dell
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2020-29491CRITICAL10.0PL ✓same product

Dell Wyse ThinOS — niebezpieczna domyślna konfiguracja umożliwia nieautoryzowany dostęp

CVE-2020-29492CRITICAL10.0PL ✓same product

Dell Wyse ThinOS — niezabezpieczona domyślna konfiguracja umożliwia nieautoryzowany dostęp

CVE-2021-21551HIGH8.8⚠ KEVsame product

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation ...

CVE-2025-36600HIGH8.2same product

Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vu...

CVE-2024-52541HIGH8.2same product

Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local ...