DSA-2024-122: Security Update for Dell Client BIOS for an Incorrect Authorization Vulnerability
Zusammenfassung: Dell Client BIOS remediation is available for an Incorrect Authorization Vulnerability that could be exploited by malicious users to compromise the affected system.
Dieser Artikel gilt für
Dieser Artikel gilt nicht für
Dieser Artikel ist nicht an ein bestimmtes Produkt gebunden.
In diesem Artikel werden nicht alle Produktversionen aufgeführt.
Auswirkungen
Medium
Details
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2024-0160 | Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS. | 6.8 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2024-0160 | Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS. | 6.8 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Betroffene Produkte und Korrektur
| Product | Software/Firmware | Affected Version | Remediated Version | Release Date (MM/DD/YYYY) | Link |
|---|---|---|---|---|---|
| Dell G3 3500 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Dell G5 5500 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Dell G7 7500 | BIOS | Versions prior to 1.32.0 | Versions 1.32.0 or later | 05/30/2024 | Go to the Drivers & Downloads site for updates |
| Dell G7 7700 | BIOS | Versions prior to 1.32.0 | Versions 1.32.0 or later | 05/30/2024 | Go to the Drivers & Downloads site for updates |
| Inspiron 7500 | BIOS | Versions prior to 1.28.0 | Versions 1.28.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Inspiron 7501 | BIOS | Versions prior to 1.28.0 | Versions 1.28.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3410 | BIOS | Versions prior to 1.29.0 | Versions 1.29.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3420 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3510 | BIOS | Versions prior to 1.29.0 | Versions 1.29.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3520 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Precision 5550 | BIOS | Versions prior to 1.31.0 | Versions 1.31.0 or later | 08/12/2024 | Go to the Drivers & Downloads site for updates |
| Precision 5750 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/12/2024 | Go to the Drivers & Downloads site for updates |
| Vostro 7500 | BIOS | Versions prior to 1.28.0 | Versions 1.28.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| XPS 15 9500 | BIOS | Versions prior to 1.31.0 | Versions 1.31.0 or later | 08/13/2024 | Go to the Drivers & Downloads site for updates |
| XPS 17 9700 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/12/2024 | Go to the Drivers & Downloads site for updates |
| Product | Software/Firmware | Affected Version | Remediated Version | Release Date (MM/DD/YYYY) | Link |
|---|---|---|---|---|---|
| Dell G3 3500 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Dell G5 5500 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Dell G7 7500 | BIOS | Versions prior to 1.32.0 | Versions 1.32.0 or later | 05/30/2024 | Go to the Drivers & Downloads site for updates |
| Dell G7 7700 | BIOS | Versions prior to 1.32.0 | Versions 1.32.0 or later | 05/30/2024 | Go to the Drivers & Downloads site for updates |
| Inspiron 7500 | BIOS | Versions prior to 1.28.0 | Versions 1.28.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Inspiron 7501 | BIOS | Versions prior to 1.28.0 | Versions 1.28.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3410 | BIOS | Versions prior to 1.29.0 | Versions 1.29.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3420 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3510 | BIOS | Versions prior to 1.29.0 | Versions 1.29.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3520 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Precision 5550 | BIOS | Versions prior to 1.31.0 | Versions 1.31.0 or later | 08/12/2024 | Go to the Drivers & Downloads site for updates |
| Precision 5750 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/12/2024 | Go to the Drivers & Downloads site for updates |
| Vostro 7500 | BIOS | Versions prior to 1.28.0 | Versions 1.28.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| XPS 15 9500 | BIOS | Versions prior to 1.31.0 | Versions 1.31.0 or later | 08/13/2024 | Go to the Drivers & Downloads site for updates |
| XPS 17 9700 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/12/2024 | Go to the Drivers & Downloads site for updates |
Workarounds und Korrekturmaßnahmen
None
Revisionsverlauf
| Revision | Date | Description |
| 1.0 | 2024-06-11 | Initial Release |
| 2.0 | 2024-08-14 | Updated Affected Products and Remediation Section: Final Platform Update |
Danksagung
CVE-2024-0160: Dell would like to thank Ben McEwan, Penetration Tester at Bridewell (www.bridewell.com) for reporting this issue.
Zugehörige Informationen
Rechtlicher Hinweis
Betroffene Produkte
Dell G3 15 3500, Dell G5 15 5500, Dell G7 15 7500, Dell G7 17 7700, Inspiron 7500, Inspiron 7501, Latitude 3410, Latitude 3420, Latitude 3510, Latitude 3520, Precision 5550, Precision 5750, Vostro 7500, XPS 15 9500, XPS 17 9700Artikeleigenschaften
Artikelnummer: 000224763
Artikeltyp: Dell Security Advisory
Zuletzt geändert: 14 Aug. 2024
Antworten auf Ihre Fragen erhalten Sie von anderen Dell NutzerInnen
Support Services
Prüfen Sie, ob Ihr Gerät durch Support Services abgedeckt ist.