Improper input validation in Dell Client Platform BIOS
Priority LOW 31CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00151 4th percentileScored 2026-11-07
Fix Fixed Dell Client Platform BIOS (Dell): 1.35.0, 2.32.0, 1.26.0
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dell | Dell Client Platform BIOS | N/A to before 1.35.0; N/A to before 2.32.0; N/A to before 1.26.0 | 1.35.0, 2.32.0, 1.26.0 | Patch available | CNA |
- Dell Client Platform BIOS VendorDell Affected N/A to before 1.35.0; N/A to before 2.32.0; N/A to before 1.26.0 Fixed in 1.35.0, 2.32.0, 1.26.0 Patch available CNA
CPE configurations NVD · 82
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:latitude_5290_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.35.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5290_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3420_tower_firmware:*:*:*:*:*:*:*:* | before 2.32.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3620_firmware:*:*:*:*:*:*:*:* | before 2.32.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3620_tower:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:wyse_7040_thin_client_firmware:*:*:*:*:*:*:*:* | before 1.26.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:wyse_7040_thin_client:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_7720_firmware:*:*:*:*:*:*:*:* | before 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_7720:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:latitude_5290_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.35.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5290_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3420_tower_firmware:*:*:*:*:*:*:*:* Versions before 2.32.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3620_firmware:*:*:*:*:*:*:*:* Versions before 2.32.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3620_tower:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:wyse_7040_thin_client_firmware:*:*:*:*:*:*:*:* Versions before 1.26.0 Vulnerable ·Dell
- cpe:2.3:h:dell:wyse_7040_thin_client:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_7720_firmware:*:*:*:*:*:*:*:* Versions before 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_7720:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Show 72 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dell:precision_7520_firmware:1.37.0:*:*:*:*:*:*:* | 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_7520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_5530_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.32.8 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_5530_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_5520_firmware:*:*:*:*:*:*:*:* | before 1.39.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_5520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:precision_3520_firmware:*:*:*:*:*:*:*:* | before 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:precision_3520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_7450_all-in-one_firmware:*:*:*:*:*:*:*:* | before 1.34.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_7450_all-in-one:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_5050_firmware:*:*:*:*:*:*:*:* | before 1.31.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_5050:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_3050_all-in-one_firmware:*:*:*:*:*:*:*:* | before 1.34.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_3050_all-in-one:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:optiplex_3050_firmware:*:*:*:*:*:*:*:* | before 1.31.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:optiplex_3050:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7490_firmware:*:*:*:*:*:*:*:* | before 1.39.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7490:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7480_firmware:*:*:*:*:*:*:*:* | before 1.38.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7424_rugged_extreme_firmware:*:*:*:*:*:*:*:* | before 1.34.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7424_rugged_extreme:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7414_rugged_firmware:*:*:*:*:*:*:*:* | before 1.47.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7414_rugged:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7390_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7390_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7390_firmware:*:*:*:*:*:*:*:* | before 1.39.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7390:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7380_firmware:*:*:*:*:*:*:*:* | before 1.38.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7380:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7290_firmware:*:*:*:*:*:*:*:* | before 1.39.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7290:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7285_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.27.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7285_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7280_firmware:*:*:*:*:*:*:*:* | before 1.38.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7280:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_7212_rugged_extreme_tablet_firmware:*:*:*:*:*:*:*:* | before 1.51.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_7212_rugged_extreme_tablet:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5590_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5590:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5580_firmware:*:*:*:*:*:*:*:* | before 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5580:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5490_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5490:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5488_firmware:*:*:*:*:*:*:*:* | before 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5488:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5480_firmware:*:*:*:*:*:*:*:* | before 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5424_rugged_firmware:*:*:*:*:*:*:*:* | before 1.34.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5424_rugged:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5420_rugged_firmware:*:*:*:*:*:*:*:* | before 1.34.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5420_rugged:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5414_rugged_firmware:*:*:*:*:*:*:*:* | before 1.47.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5414_rugged:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5400_firmware:*:*:*:*:*:*:*:* | before 1.32.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5290_firmware:*:*:*:*:*:*:*:* | before 1.36.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5290:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5288_firmware:*:*:*:*:*:*:*:* | before 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5288:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_5280_firmware:*:*:*:*:*:*:*:* | before 1.37.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_5280:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3390_2-in-1_firmware:*:*:*:*:*:*:*:* | before 1.32.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3390_2-in-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_3300_firmware:*:*:*:*:*:*:*:* | before 1.29.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_3300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_13_3380_firmware:*:*:*:*:*:*:*:* | before 1.28.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_13_3380:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:latitude_12_rugged_extreme_7214_firmware:*:*:*:*:*:*:*:* | before 1.47.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:latitude_12_rugged_extreme_7214:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
| cpe:2.3:o:dell:embedded_box_pc_5000_firmware:*:*:*:*:*:*:*:* | before 1.26.0 | Vulnerable | Dell |
| cpe:2.3:h:dell:embedded_box_pc_5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dell |
- cpe:2.3:o:dell:precision_7520_firmware:1.37.0:*:*:*:*:*:*:* Versions 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_7520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_5530_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.32.8 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_5530_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_5520_firmware:*:*:*:*:*:*:*:* Versions before 1.39.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_5520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:precision_3520_firmware:*:*:*:*:*:*:*:* Versions before 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:precision_3520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_7450_all-in-one_firmware:*:*:*:*:*:*:*:* Versions before 1.34.0 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_7450_all-in-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_5050_firmware:*:*:*:*:*:*:*:* Versions before 1.31.0 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_5050:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_3050_all-in-one_firmware:*:*:*:*:*:*:*:* Versions before 1.34.0 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_3050_all-in-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:optiplex_3050_firmware:*:*:*:*:*:*:*:* Versions before 1.31.0 Vulnerable ·Dell
- cpe:2.3:h:dell:optiplex_3050:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7490_firmware:*:*:*:*:*:*:*:* Versions before 1.39.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7490:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7480_firmware:*:*:*:*:*:*:*:* Versions before 1.38.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7424_rugged_extreme_firmware:*:*:*:*:*:*:*:* Versions before 1.34.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7424_rugged_extreme:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7414_rugged_firmware:*:*:*:*:*:*:*:* Versions before 1.47.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7414_rugged:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7390_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7390_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7390_firmware:*:*:*:*:*:*:*:* Versions before 1.39.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7390:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7380_firmware:*:*:*:*:*:*:*:* Versions before 1.38.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7290_firmware:*:*:*:*:*:*:*:* Versions before 1.39.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7290:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7285_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.27.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7285_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7280_firmware:*:*:*:*:*:*:*:* Versions before 1.38.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7280:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_7212_rugged_extreme_tablet_firmware:*:*:*:*:*:*:*:* Versions before 1.51.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_7212_rugged_extreme_tablet:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5590_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5580_firmware:*:*:*:*:*:*:*:* Versions before 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5490_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5490:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5488_firmware:*:*:*:*:*:*:*:* Versions before 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5488:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5480_firmware:*:*:*:*:*:*:*:* Versions before 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5424_rugged_firmware:*:*:*:*:*:*:*:* Versions before 1.34.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5424_rugged:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5420_rugged_firmware:*:*:*:*:*:*:*:* Versions before 1.34.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5420_rugged:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5414_rugged_firmware:*:*:*:*:*:*:*:* Versions before 1.47.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5414_rugged:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5400_firmware:*:*:*:*:*:*:*:* Versions before 1.32.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5290_firmware:*:*:*:*:*:*:*:* Versions before 1.36.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5290:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5288_firmware:*:*:*:*:*:*:*:* Versions before 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5288:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_5280_firmware:*:*:*:*:*:*:*:* Versions before 1.37.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_5280:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3390_2-in-1_firmware:*:*:*:*:*:*:*:* Versions before 1.32.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3390_2-in-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_3300_firmware:*:*:*:*:*:*:*:* Versions before 1.29.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_3300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_13_3380_firmware:*:*:*:*:*:*:*:* Versions before 1.28.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_13_3380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:latitude_12_rugged_extreme_7214_firmware:*:*:*:*:*:*:*:* Versions before 1.47.0 Vulnerable ·Dell
- cpe:2.3:h:dell:latitude_12_rugged_extreme_7214:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
- cpe:2.3:o:dell:embedded_box_pc_5000_firmware:*:*:*:*:*:*:*:* Versions before 1.26.0 Vulnerable ·Dell
- cpe:2.3:h:dell:embedded_box_pc_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Remediation
- Fix · CNA Dell Client Platform BIOS (Dell) Fixed in 1.35.0, 2.32.0, 1.26.0
Timeline
- 2026-10-02 Threatist record created from CVE-2024-38483
- 2026-10-03 Alias added: GHSA-cwwj-4w92-qq6h
References
More Dell Embedded Box Pc 5000 Firmware vulnerabilities
- TI-2024-35208 Weak authentication in Dell Client Platform BIOS CVSS 3.1HIGH 8.2
- TI-2022-14131 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 8.2
- TI-2022-14130 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 8.2
- TI-2022-10105 Dell BIOS versions contain an Insecure Automated Optimization vulnerability. CVSS 3.1HIGH 7.9
- TI-2022-14135 Stack-based buffer overflow in Dell CPG BIOS CVSS 3.1HIGH 7.8
- TI-2022-14129 Improper input validation in Dell CPG BIOS CVSS 3.1HIGH 7.8
Sources
- CVE-2024-38483 · CVE Program
- CVE-2024-38483 · NVD
- FIRST EPSS
- GHSA-cwwj-4w92-qq6h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences