CVE-2024-38483: Input Validation

First published: Wed Aug 14 2024(Updated: )

Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

Credit: security_alert@emc.com

Affected Software	Affected Version	How to fix
All of
Dell Latitude 5290 2-in-1 Firmware	<1.35.0
Dell Latitude 5290 2-in-1
All of
Dell Precision 3420 Tower Firmware	<2.32.0
Dell Precision 3420
All of
Dell Precision 3620 Firmware	<2.32.0
Dell Precision 3620 Tower
All of
Dell Wyse 7040 Thin Client Firmware	<1.26.0
Dell Wyse 7040 Thin Client
All of
Dell Precision 7720 Firmware	<1.37.0
Dell Precision 7720
All of
Dell Precision 7520 Firmware	=1.37.0
Dell Precision 7520
All of
Dell Precision 5530 2-in-1 Firmware	<1.32.8
Dell Precision 5530 2-in-1
All of
Dell Precision 5520 Firmware	<1.39.0
Dell Precision 5520
All of
Dell Precision 3520 Firmware	<1.37.0
Dell Precision 3520
All of
Dell Optiplex 7450 All-in-one Firmware	<1.34.0
Dell Optiplex 7450 All-in-one
All of
Dell Optiplex 5050 Firmware	<1.31.0
Dell Optiplex 5050
All of
Dell Optiplex 3050 All-in-one Firmware	<1.34.0
Dell Optiplex 3050 All-in-one
All of
Dell Optiplex 3050 Firmware	<1.31.0
Dell Optiplex 3050
All of
Dell Latitude 7490 Firmware	<1.39.0
Dell Latitude 7490
All of
Dell Latitude 7480 Firmware	<1.38.0
Dell Latitude 7480
All of
Dell Latitude 7424 Rugged Extreme Firmware	<1.34.0
Dell Latitude 7424 Rugged Extreme
All of
Dell Latitude 7414 Rugged Firmware	<1.47.0
Dell Latitude 7414 Rugged
All of
Dell Latitude 7390 2-in-1 Firmware	<1.36.0
Dell Latitude 7390 2-in-1
All of
Dell Latitude 7390 Firmware	<1.39.0
Dell Latitude 7390
All of
Dell Latitude 7380 Firmware	<1.38.0
Dell Latitude 7380
All of
Dell Latitude 7290 Firmware	<1.39.0
Dell Latitude 7290
All of
Dell Latitude 7285 2-in-1 Firmware	<1.27.0
Dell Latitude 7285 2-in-1
All of
Dell Latitude 7280 Firmware	<1.38.0
Dell Latitude 7280
All of
Dell Latitude 7212 Rugged Extreme Tablet Firmware	<1.51.0
Dell Latitude 7212 Rugged Extreme Tablet
All of
Dell Latitude 5590 Firmware	<1.36.0
Dell Latitude 5590
All of
Dell Latitude 5580 Firmware	<1.37.0
Dell Latitude 5580
All of
Dell Latitude 5490 Firmware	<1.36.0
Dell Latitude 5490
All of
Dell Latitude 5488 Firmware	<1.37.0
Dell Latitude 5488
All of
Dell Latitude 5480 Firmware	<1.37.0
Dell Latitude 5480
All of
Dell Latitude 5424 Rugged Firmware	<1.34.0
Dell Latitude 5424 Rugged
All of
Dell Latitude 5420 Rugged Firmware	<1.34.0
Dell Latitude 5420 Rugged
All of
Dell Latitude 5414 Rugged Firmware	<1.47.0
Dell Latitude 5414 Rugged
All of
Dell Latitude 5400 Firmware	<1.32.0
Dell Latitude 5400
All of
Dell Latitude 5290 Firmware	<1.36.0
Dell Latitude 5290
All of
Dell Latitude 5288 Firmware	<1.37.0
Dell Latitude 5288
All of
Dell Latitude 5280 Firmware	<1.37.0
Dell Latitude 5280
All of
Dell Latitude 3390 2-in-1 Firmware	<1.32.0
Dell Latitude 3390 2-in-1
All of
Dell Latitude 3300 Firmware	<1.29.0
Dell Latitude 3300
All of
Dell Latitude 13 3380 Firmware	<1.28.0
Dell Latitude 13 3380
All of
Dell Latitude 12 Rugged Extreme 7214 Firmware	<1.47.0
Dell Latitude 12 Rugged Extreme 7214
All of
Dell Embedded Box Pc 5000 Firmware	<1.26.0
Dell Embedded Box Pc 5000

Never miss a vulnerability like this again

Reference Links

https://www.dell.com/support/kbdoc/en-us/000225776/dsa-2024-260

CVE-2024-38483: Input Validation

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact