Priority LOW 33
Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00173 · Published 2024-08-28 · Fixed in 1.27.0, 1.22.0 +82 CWE-59
Priority LOW 29
Dell BIOS contains an improper input validation vulnerability.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00147 · Published 2024-07-02 · Fixed in 1.28.0, 1.23.0 +66 CWE-20
Priority LOW 21
Dell Client BIOS contains an Out-of-bounds Write vulnerability.
CVSS 3.1MEDIUM 4.7· Local · High privileges · No interaction · EPSS 0.00137 · Published 2024-06-12 · Fixed in 1.32.0, 1.6.0 +4 CWE-787
Priority LOW 32
Dell Client Platform contains an incorrect authorization vulnerability.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00249 · Published 2024-06-12 · Fixed in 1.32.0 CWE-863
Priority LOW 21
Dell BIOS contains an Out-of-Bounds Write vulnerability.
CVSS 3.1MEDIUM 4.7· Local · High privileges · No interaction · EPSS 0.00176 · Published 2024-04-10 · Fixed in 1.29.0, 1.16.0 +20 CWE-787
Priority LOW 36
Dell BIOS versions contain an Insecure Automated Optimization vulnerability.
CVSS 3.1HIGH 7.9· Local · High privileges · No interaction · EPSS 0.00223 · Published 2022-09-06 · Fixed in Gen7, Gen8 +4 CWE-1038
Priority LOW 35
Dell BIOS versions contain a stack-based buffer overflow vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00195 · Published 2022-09-06 · Fixed in All CWE-121
Priority LOW 30
Dell BIOS contains a race condition vulnerability.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00135 · Published 2022-09-06 · Fixed in All CWE-367
Priority LOW 33
Dell BIOS versions contain an Improper Authentication vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00173 · Published 2022-09-06 · Fixed in All CWE-287
Priority LOW 22
Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability.
CVSS 3.1MEDIUM 5.1· Local · High privileges · No interaction · EPSS 0.00138 · Published 2022-02-09 · Fixed in 1.15 CWE-345
Priority LOW 31
Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability.
CVSS 3.1HIGH 7.2· Physical · High privileges · No interaction · EPSS 0.00257 · Published 2022-02-09 · Fixed in 1.15 CWE-1190
Priority LOW 33
Dell BIOSConnect feature contains a buffer overflow vulnerability.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00287 · Published 2021-06-24 · Fixed in Gen 11, Gen 10 CWE-121
Priority LOW 33
Dell BIOSConnect feature contains a buffer overflow vulnerability.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00279 · Published 2021-06-24 · Fixed in Gen 11, Gen 10 CWE-121
Priority LOW 32
Dell BIOSConnect feature contains a buffer overflow vulnerability.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00263 · Published 2021-06-24 · Fixed in Gen 11, Gen 10 CWE-122
Priority LOW 30
Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00539 · Published 2021-06-24 · No fix listed CWE-295
THREATIST.IORead the docs