CVE-2024-38483: Input Validation
Published Aug 14, 2024
·Updated
Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Affected Software
82 affected components
All of the following
Dell Latitude 5290 2-in-1 Firmware<1.35.0
Dell Latitude 5290 2-in-1
All of the following
Dell Precision 3420 Tower Firmware<2.32.0
Dell Precision 3420
All of the following
Dell Precision 3620 Firmware<2.32.0
Dell Precision 3620 Tower
All of the following
Dell Wyse 7040 Thin Client Firmware<1.26.0
Dell Wyse 7040 Thin Client
All of the following
Dell Precision 7720 Firmware<1.37.0
Dell Precision 7720
All of the following
Dell Precision 7520 Firmware=1.37.0
Dell Precision 7520
All of the following
Dell Precision 5530 2-in-1 Firmware<1.32.8
Dell Precision 5530 2-in-1
All of the following
Dell Precision 5520 Firmware<1.39.0
Dell Precision 5520
All of the following
Dell Precision 3520 Firmware<1.37.0
Dell Precision 3520
All of the following
Dell Optiplex 7450 All-in-one Firmware<1.34.0
Dell Optiplex 7450 All-in-one
All of the following
Dell Optiplex 5050 Firmware<1.31.0
Dell Optiplex 5050
All of the following
Dell Optiplex 3050 All-in-one Firmware<1.34.0
Dell Optiplex 3050 All-in-one
All of the following
Dell Optiplex 3050 Firmware<1.31.0
Dell OptiPlex 3050
All of the following
Dell Latitude 7490 Firmware<1.39.0
Dell Latitude 7490
All of the following
Dell Latitude 7480 Firmware<1.38.0
Dell Latitude 7480
All of the following
Dell Latitude 7424 Rugged Extreme Firmware<1.34.0
Dell Latitude 7424 Rugged Extreme
All of the following
Dell Latitude 7414 Rugged Firmware<1.47.0
Dell Latitude 7414 Rugged
All of the following
Dell Latitude 7390 2-in-1 Firmware<1.36.0
Dell Latitude 7390 2-in-1
All of the following
Dell Latitude 7390 Firmware<1.39.0
Dell Latitude 7390
All of the following
Dell Latitude 7380 Firmware<1.38.0
Dell Latitude 7380
All of the following
Dell Latitude 7290 Firmware<1.39.0
Dell Latitude 7290
All of the following
Dell Latitude 7285 2-in-1 Firmware<1.27.0
Dell Latitude 7285 2-in-1
All of the following
Dell Latitude 7280 Firmware<1.38.0
Dell Latitude 7280
All of the following
Dell Latitude 7212 Rugged Extreme Tablet Firmware<1.51.0
Dell Latitude 7212 Rugged Extreme Tablet
All of the following
Dell Latitude 5590 Firmware<1.36.0
Dell Latitude 5590
All of the following
Dell Latitude 5580 Firmware<1.37.0
Dell Latitude 5580
All of the following
Dell Latitude 5490 Firmware<1.36.0
Dell Latitude 5490
All of the following
Dell Latitude 5488 Firmware<1.37.0
Dell Latitude 5488
All of the following
Dell Latitude 5480 Firmware<1.37.0
Dell Latitude 5480
All of the following
Dell Latitude 5424 Rugged Firmware<1.34.0
Dell Latitude 5424 Rugged
All of the following
Dell Latitude 5420 Rugged Firmware<1.34.0
Dell Latitude 5420 Rugged
All of the following
Dell Latitude 5414 Rugged Firmware<1.47.0
Dell Latitude 5414 Rugged
All of the following
Dell Latitude 5400 Firmware<1.32.0
Dell Latitude 5400
All of the following
Dell Latitude 5290 Firmware<1.36.0
Dell Latitude 5290
All of the following
Dell Latitude 5288 Firmware<1.37.0
Dell Latitude 5288
All of the following
Dell Latitude 5280 Firmware<1.37.0
Dell Latitude 5280
All of the following
Dell Latitude 3390 2-in-1 Firmware<1.32.0
Dell Latitude 3390 2-in-1
All of the following
Dell Latitude 3300 Firmware<1.29.0
Dell Latitude 3300
All of the following
Dell Latitude 13 3380 Firmware<1.28.0
Dell Latitude 13 3380
All of the following
Dell Latitude 12 Rugged Extreme 7214 Firmware<1.47.0
Dell Latitude 12 Rugged Extreme 7214
All of the following
Dell Embedded Box Pc 5000 Firmware<1.26.0
Dell Embedded Box Pc 5000
Event History
Aug 14, 2024
CVE Published
via MITRE·09:24 AM
Data Sourced
via MITRE·09:24 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-38483?
CVE-2024-38483 is classified as a high severity vulnerability due to its potential for code execution by a privileged attacker with local access.
2
How can I mitigate CVE-2024-38483?
To mitigate CVE-2024-38483, ensure that affected Dell firmware is updated to the latest version that addresses the vulnerability.
3
Which Dell products are affected by CVE-2024-38483?
CVE-2024-38483 affects specific Dell products including Latitude, Precision, Wyse, and OptiPlex models with firmware versions prior to specified limits.
4
Can CVE-2024-38483 be exploited remotely?
No, CVE-2024-38483 requires local access to the affected system for exploitation.
5
What type of vulnerability is CVE-2024-38483?
CVE-2024-38483 is an improper input validation vulnerability found in an externally developed component of Dell BIOS.