CVE-2024-42424: Input Validation

Published Sep 10, 2024
·
Updated

Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Improper Input Validation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

Affected Software

4 affected components
All of the following
Dell Precision 7920 Rack Firmware<2.22.1
Dell Precision 7920 Rack
All of the following
Dell 7920 Xl Rack Firmware<2.22.1
Dell 7920 Xl Rack

Event History

Sep 10, 2024
CVE Published
via MITRE·08:05 AM
Data Sourced
via MITRE·08:05 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2024-42424?

CVE-2024-42424 has a high severity rating due to its potential for information disclosure by a privileged attacker with local access.

2

How do I fix CVE-2024-42424?

To fix CVE-2024-42424, update the Dell Precision Rack firmware to version 2.22.2 or later.

3

Who is affected by CVE-2024-42424?

CVE-2024-42424 affects specific Dell Precision Rack 14G Intel BIOS versions prior to 2.22.2.

4

What type of vulnerability is CVE-2024-42424?

CVE-2024-42424 is classified as an Improper Input Validation vulnerability.

5

What could an attacker achieve by exploiting CVE-2024-42424?

An attacker exploiting CVE-2024-42424 could potentially gain unauthorized access to sensitive information on affected systems.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203