DSA-2024-122: Security Update for Dell Client BIOS for an Incorrect Authorization Vulnerability
Summary: Dell Client BIOS remediation is available for an Incorrect Authorization Vulnerability that could be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Medium
Details
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2024-0160 | Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS. | 6.8 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2024-0160 | Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS. | 6.8 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected Products & Remediation
| Product | Software/Firmware | Affected Version | Remediated Version | Release Date (MM/DD/YYYY) | Link |
|---|---|---|---|---|---|
| Dell G3 3500 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Dell G5 5500 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Dell G7 7500 | BIOS | Versions prior to 1.32.0 | Versions 1.32.0 or later | 05/30/2024 | Go to the Drivers & Downloads site for updates |
| Dell G7 7700 | BIOS | Versions prior to 1.32.0 | Versions 1.32.0 or later | 05/30/2024 | Go to the Drivers & Downloads site for updates |
| Inspiron 7500 | BIOS | Versions prior to 1.28.0 | Versions 1.28.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Inspiron 7501 | BIOS | Versions prior to 1.28.0 | Versions 1.28.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3410 | BIOS | Versions prior to 1.29.0 | Versions 1.29.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3420 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3510 | BIOS | Versions prior to 1.29.0 | Versions 1.29.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3520 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Precision 5550 | BIOS | Versions prior to 1.31.0 | Versions 1.31.0 or later | 08/12/2024 | Go to the Drivers & Downloads site for updates |
| Precision 5750 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/12/2024 | Go to the Drivers & Downloads site for updates |
| Vostro 7500 | BIOS | Versions prior to 1.28.0 | Versions 1.28.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| XPS 15 9500 | BIOS | Versions prior to 1.31.0 | Versions 1.31.0 or later | 08/13/2024 | Go to the Drivers & Downloads site for updates |
| XPS 17 9700 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/12/2024 | Go to the Drivers & Downloads site for updates |
| Product | Software/Firmware | Affected Version | Remediated Version | Release Date (MM/DD/YYYY) | Link |
|---|---|---|---|---|---|
| Dell G3 3500 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Dell G5 5500 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Dell G7 7500 | BIOS | Versions prior to 1.32.0 | Versions 1.32.0 or later | 05/30/2024 | Go to the Drivers & Downloads site for updates |
| Dell G7 7700 | BIOS | Versions prior to 1.32.0 | Versions 1.32.0 or later | 05/30/2024 | Go to the Drivers & Downloads site for updates |
| Inspiron 7500 | BIOS | Versions prior to 1.28.0 | Versions 1.28.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Inspiron 7501 | BIOS | Versions prior to 1.28.0 | Versions 1.28.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3410 | BIOS | Versions prior to 1.29.0 | Versions 1.29.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3420 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3510 | BIOS | Versions prior to 1.29.0 | Versions 1.29.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Latitude 3520 | BIOS | Versions prior to 1.36.0 | Versions 1.36.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| Precision 5550 | BIOS | Versions prior to 1.31.0 | Versions 1.31.0 or later | 08/12/2024 | Go to the Drivers & Downloads site for updates |
| Precision 5750 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/12/2024 | Go to the Drivers & Downloads site for updates |
| Vostro 7500 | BIOS | Versions prior to 1.28.0 | Versions 1.28.0 or later | 06/11/2024 | Go to the Drivers & Downloads site for updates |
| XPS 15 9500 | BIOS | Versions prior to 1.31.0 | Versions 1.31.0 or later | 08/13/2024 | Go to the Drivers & Downloads site for updates |
| XPS 17 9700 | BIOS | Versions prior to 1.30.0 | Versions 1.30.0 or later | 06/12/2024 | Go to the Drivers & Downloads site for updates |
Workarounds & Mitigations
None
Revision History
| Revision | Date | Description |
| 1.0 | 2024-06-11 | Initial Release |
| 2.0 | 2024-08-14 | Updated Affected Products and Remediation Section: Final Platform Update |
Acknowledgements
CVE-2024-0160: Dell would like to thank Ben McEwan, Penetration Tester at Bridewell (www.bridewell.com) for reporting this issue.
Related Information
Legal Disclaimer
Affected Products
Dell G3 15 3500, Dell G5 15 5500, Dell G7 15 7500, Dell G7 17 7700, Inspiron 7500, Inspiron 7501, Latitude 3410, Latitude 3420, Latitude 3510, Latitude 3520, Precision 5550, Precision 5750, Vostro 7500, XPS 15 9500, XPS 17 9700Article Properties
Article Number: 000224763
Article Type: Dell Security Advisory
Last Modified: 14 Aug 2024
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.