Out-of-bounds write in Dell CPG BIOS
Priority LOW 19CWE-787Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00125 2nd percentileScored 2026-11-08
Fix Fixed CPG BIOS (Dell): 1.30.0, 1.26.0, 1.34.0 +13
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dell | CPG BIOS | N/A to before 1.30.0; N/A to before 1.26.0; N/A to before 1.34.0; N/A to before 1.28.0; N/A to before 1.25.0; N/A to before 1.24.0; N/A to before 1.31.0; N/A to before 1.36.0; N/A to before 1.35.0; N/A to before 1.29.0; N/A to before 1.32.0; N/A to before 1.33.0; N/A to before 1.50.0; N/A to before 1.37.0; N/A to before 1.38.0; N/A to before 1.31.8 | 1.30.0, 1.26.0, 1.34.0, 1.28.0, 1.25.0, 1.24.0, 1.31.0, 1.36.0, 1.35.0, 1.29.0, 1.32.0, 1.33.0, 1.50.0, 1.37.0, 1.38.0, 1.31.8 | Patch available | CNA |
- CPG BIOS VendorDell Affected N/A to before 1.30.0; N/A to before 1.26.0; N/A to before 1.34.0; N/A to before 1.28.0; N/A to before 1.25.0; N/A to before 1.24.0; N/A to before 1.31.0; N/A to before 1.36.0; N/A to before 1.35.0; N/A to before 1.29.0; N/A to before 1.32.0; N/A to before 1.33.0; N/A to before 1.50.0; N/A to before 1.37.0; N/A to before 1.38.0; N/A to before 1.31.8 Fixed in 1.30.0, 1.26.0, 1.34.0, 1.28.0, 1.25.0, 1.24.0, 1.31.0, 1.36.0, 1.35.0, 1.29.0, 1.32.0, 1.33.0, 1.50.0, 1.37.0, 1.38.0, 1.31.8 Patch available CNA
CPE configurations NVD · 148
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:inspiron_3480_firmware:*:*:*:*:*:*:*:* | before 1.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:inspiron_3580_firmware:*:*:*:*:*:*:*:* | before 1.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:inspiron_3580:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3120_firmware:*:*:*:*:*:*:*:* | before 1.26.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3190_firmware:*:*:*:*:*:*:*:* | before 1.34.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3190:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3190_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.34.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3190_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:inspiron_3480_firmware:*:*:*:*:*:*:*:* Versions before 1.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:inspiron_3580_firmware:*:*:*:*:*:*:*:* Versions before 1.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:inspiron_3580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3120_firmware:*:*:*:*:*:*:*:* Versions before 1.26.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3190_firmware:*:*:*:*:*:*:*:* Versions before 1.34.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3190:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3190_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.34.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3190_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Show 138 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:latitude_3300_firmware:*:*:*:*:*:*:*:* | before 1.28.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3310_firmware:*:*:*:*:*:*:*:* | before 1.25.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3310_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.24.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3310_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3390_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.31.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3390_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5288_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5288:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5290_firmware:*:*:*:*:*:*:*:* | before 1.35.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5290:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5290_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.34.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5290_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5300_firmware:*:*:*:*:*:*:*:* | before 1.31.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5300_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.31.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5300_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5310_firmware:*:*:*:*:*:*:*:* | before 1.24.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5310_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.24.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5310_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5400_firmware:*:*:*:*:*:*:*:* | before 1.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5401_firmware:*:*:*:*:*:*:*:* | before 1.31.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5401:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5410_firmware:*:*:*:*:*:*:*:* | before 1.28.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5411_firmware:*:*:*:*:*:*:*:* | before 1.29.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5411:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5420_rugged_firmware:*:*:*:*:*:*:*:* | before 1.32.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5420_rugged:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5424_rugged_firmware:*:*:*:*:*:*:*:* | before 1.32.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5424_rugged:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5480_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5488_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5488:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5490_firmware:*:*:*:*:*:*:*:* | before 1.35.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5490:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5491_firmware:*:*:*:*:*:*:*:* | before 1.33.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5491:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5500_firmware:*:*:*:*:*:*:*:* | before 1.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5501_firmware:*:*:*:*:*:*:*:* | before 1.31.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5501:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5510_firmware:*:*:*:*:*:*:*:* | before 1.28.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5511_firmware:*:*:*:*:*:*:*:* | before 1.29.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5511:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5580_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5580:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5590_firmware:*:*:*:*:*:*:*:* | before 1.35.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5590:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5591_firmware:*:*:*:*:*:*:*:* | before 1.33.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5591:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7200_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.29.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7200_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7210_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7210_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7212_rugged_extreme_tablet_firmware:*:*:*:*:*:*:*:* | before 1.50.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7212_rugged_extreme_tablet:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7220_rugged_extreme_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7220_rugged_extreme:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7280_firmware:*:*:*:*:*:*:*:* | before 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7280:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7290_firmware:*:*:*:*:*:*:*:* | before 1.38.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7290:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7300_firmware:*:*:*:*:*:*:*:* | before 1.31.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7310_firmware:*:*:*:*:*:*:*:* | before 1.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7380_firmware:*:*:*:*:*:*:*:* | before 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7380:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7390_firmware:*:*:*:*:*:*:*:* | before 1.38.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7390:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7390_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.35.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7390_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7400_firmware:*:*:*:*:*:*:*:* | before 1.31.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7400_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.28.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7400_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7410_firmware:*:*:*:*:*:*:*:* | before 1.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7424_rugged_extreme_firmware:*:*:*:*:*:*:*:* | before 1.32.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7424_rugged_extreme:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7480_firmware:*:*:*:*:*:*:*:* | before 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7490_firmware:*:*:*:*:*:*:*:* | before 1.38.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7490:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_9410_firmware:*:*:*:*:*:*:*:* | before 1.29.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_9410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_9510_2in1_firmware:*:*:*:*:*:*:*:* | before 1.28.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_9510_2in1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_rugged_7220ex_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_rugged_7220ex:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3520_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3530_firmware:*:*:*:*:*:*:*:* | before 1.33.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3540_firmware:*:*:*:*:*:*:*:* | before 1.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3540:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3541_firmware:*:*:*:*:*:*:*:* | before 1.31.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3541:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3550_firmware:*:*:*:*:*:*:*:* | before 1.28.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3550:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3551_firmware:*:*:*:*:*:*:*:* | before 1.29.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3551:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_5530_firmware:*:*:*:*:*:*:*:* | before 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_5530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_5530_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.31.8 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_5530_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_5540_firmware:*:*:*:*:*:*:*:* | before 1.28.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_5540:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_7530_firmware:*:*:*:*:*:*:*:* | before 1.34.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_7530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_7540_firmware:*:*:*:*:*:*:*:* | before 1.32.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_7540:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_7550_firmware:*:*:*:*:*:*:*:* | before 1.31.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_7550:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_7730_firmware:*:*:*:*:*:*:*:* | before 1.34.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_7730:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_7740_firmware:*:*:*:*:*:*:*:* | before 1.32.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_7740:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_7750_firmware:*:*:*:*:*:*:*:* | before 1.31.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_7750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3480_firmware:*:*:*:*:*:*:*:* | before 1.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3580_firmware:*:*:*:*:*:*:*:* | before 1.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3580:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:vostro_3583_firmware:*:*:*:*:*:*:*:* | before 1.30.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:vostro_3583:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:wyse_5470_firmware:*:*:*:*:*:*:*:* | before 1.25.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:wyse_5470:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:wyse_5470_all-in-one_firmware:*:*:*:*:*:*:*:* | before 1.26.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:wyse_5470_all-in-one:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:xps_15_7590_firmware:*:*:*:*:*:*:*:* | before 1.28.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:xps_15_7590:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:latitude_3300_firmware:*:*:*:*:*:*:*:* Versions before 1.28.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3310_firmware:*:*:*:*:*:*:*:* Versions before 1.25.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3310_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.24.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3310_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3390_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.31.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3390_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5288_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5288:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5290_firmware:*:*:*:*:*:*:*:* Versions before 1.35.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5290:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5290_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.34.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5290_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5300_firmware:*:*:*:*:*:*:*:* Versions before 1.31.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5300_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.31.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5300_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5310_firmware:*:*:*:*:*:*:*:* Versions before 1.24.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5310_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.24.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5310_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5400_firmware:*:*:*:*:*:*:*:* Versions before 1.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5401_firmware:*:*:*:*:*:*:*:* Versions before 1.31.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5401:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5410_firmware:*:*:*:*:*:*:*:* Versions before 1.28.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5411_firmware:*:*:*:*:*:*:*:* Versions before 1.29.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5411:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5420_rugged_firmware:*:*:*:*:*:*:*:* Versions before 1.32.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5420_rugged:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5424_rugged_firmware:*:*:*:*:*:*:*:* Versions before 1.32.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5424_rugged:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5480_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5488_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5488:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5490_firmware:*:*:*:*:*:*:*:* Versions before 1.35.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5490:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5491_firmware:*:*:*:*:*:*:*:* Versions before 1.33.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5491:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5500_firmware:*:*:*:*:*:*:*:* Versions before 1.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5501_firmware:*:*:*:*:*:*:*:* Versions before 1.31.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5501:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5510_firmware:*:*:*:*:*:*:*:* Versions before 1.28.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5511_firmware:*:*:*:*:*:*:*:* Versions before 1.29.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5511:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5580_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5590_firmware:*:*:*:*:*:*:*:* Versions before 1.35.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5591_firmware:*:*:*:*:*:*:*:* Versions before 1.33.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5591:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7200_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.29.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7200_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7210_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7210_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7212_rugged_extreme_tablet_firmware:*:*:*:*:*:*:*:* Versions before 1.50.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7212_rugged_extreme_tablet:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7220_rugged_extreme_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7220_rugged_extreme:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7280_firmware:*:*:*:*:*:*:*:* Versions before 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7280:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7290_firmware:*:*:*:*:*:*:*:* Versions before 1.38.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7290:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7300_firmware:*:*:*:*:*:*:*:* Versions before 1.31.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7310_firmware:*:*:*:*:*:*:*:* Versions before 1.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7380_firmware:*:*:*:*:*:*:*:* Versions before 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7390_firmware:*:*:*:*:*:*:*:* Versions before 1.38.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7390:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7390_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.35.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7390_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7400_firmware:*:*:*:*:*:*:*:* Versions before 1.31.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7400_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.28.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7400_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7410_firmware:*:*:*:*:*:*:*:* Versions before 1.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7424_rugged_extreme_firmware:*:*:*:*:*:*:*:* Versions before 1.32.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7424_rugged_extreme:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7480_firmware:*:*:*:*:*:*:*:* Versions before 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7490_firmware:*:*:*:*:*:*:*:* Versions before 1.38.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7490:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_9410_firmware:*:*:*:*:*:*:*:* Versions before 1.29.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_9410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_9510_2in1_firmware:*:*:*:*:*:*:*:* Versions before 1.28.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_9510_2in1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_rugged_7220ex_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_rugged_7220ex:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3520_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3530_firmware:*:*:*:*:*:*:*:* Versions before 1.33.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3540_firmware:*:*:*:*:*:*:*:* Versions before 1.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3540:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3541_firmware:*:*:*:*:*:*:*:* Versions before 1.31.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3541:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3550_firmware:*:*:*:*:*:*:*:* Versions before 1.28.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3551_firmware:*:*:*:*:*:*:*:* Versions before 1.29.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3551:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_5530_firmware:*:*:*:*:*:*:*:* Versions before 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_5530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_5530_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.31.8 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_5530_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_5540_firmware:*:*:*:*:*:*:*:* Versions before 1.28.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_5540:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_7530_firmware:*:*:*:*:*:*:*:* Versions before 1.34.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_7530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_7540_firmware:*:*:*:*:*:*:*:* Versions before 1.32.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_7540:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_7550_firmware:*:*:*:*:*:*:*:* Versions before 1.31.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_7550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_7730_firmware:*:*:*:*:*:*:*:* Versions before 1.34.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_7730:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_7740_firmware:*:*:*:*:*:*:*:* Versions before 1.32.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_7740:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_7750_firmware:*:*:*:*:*:*:*:* Versions before 1.31.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_7750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3480_firmware:*:*:*:*:*:*:*:* Versions before 1.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3580_firmware:*:*:*:*:*:*:*:* Versions before 1.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:vostro_3583_firmware:*:*:*:*:*:*:*:* Versions before 1.30.0 Vulnerable ·Dell
- cpe:2.3:h:dell:vostro_3583:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:wyse_5470_firmware:*:*:*:*:*:*:*:* Versions before 1.25.0 Vulnerable ·Dell
- cpe:2.3:h:dell:wyse_5470:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:wyse_5470_all-in-one_firmware:*:*:*:*:*:*:*:* Versions before 1.26.0 Vulnerable ·Dell
- cpe:2.3:h:dell:wyse_5470_all-in-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:xps_15_7590_firmware:*:*:*:*:*:*:*:* Versions before 1.28.0 Vulnerable ·Dell
- cpe:2.3:h:dell:xps_15_7590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Remediation
- Fix · CNA CPG BIOS (Dell) Fixed in 1.30.0, 1.26.0, 1.34.0, 1.28.0, 1.25.0, 1.24.0, 1.31.0, 1.36.0, 1.35.0, 1.29.0, 1.32.0, 1.33.0, 1.50.0, 1.37.0, 1.38.0, 1.31.8
Timeline
- 2026-10-02 Threatist record created from CVE-2024-32855
- 2026-10-03 Alias added: GHSA-57q2-23pw-7c8w
References
More Dell Inspiron 3480 Firmware vulnerabilities
- TI-2022-14131 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 8.2
- TI-2022-14130 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 8.2
- TI-2022-10105 Dell BIOS versions contain an Insecure Automated Optimization vulnerability. CVSS 3.1HIGH 7.9
- TI-2022-14135 Stack-based buffer overflow in Dell CPG BIOS CVSS 3.1HIGH 7.8
- TI-2022-14129 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 7.8
- TI-2022-14127 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 7.8
Sources
- CVE-2024-32855 · CVE Program
- CVE-2024-32855 · NVD
- FIRST EPSS
- GHSA-57q2-23pw-7c8w · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences