CVE-2024-32858

HIGH
Published Jun 13, 2024 Modified Nov 21, 2024 CWE-20

Description

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

Is your site exposed to CVE-2024-32858?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.5
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness Type (CWE)

CWE-20 Improper Input Validation

Affected Products

Vendor Product
dell xps_8960_firmware
dell xps_8960
dell xps_8950_firmware
dell xps_8950
dell inspiron_3502_firmware
dell inspiron_3502
dell inspiron_15_3521_firmware
dell inspiron_15_3521
dell inspiron_15_3510_firmware
dell inspiron_15_3510
dell aurora_r16_firmware
dell aurora_r16
dell alienware_x17_r2_firmware
dell alienware_x17_r2
dell alienware_x17_r1_firmware
dell alienware_x17_r1
dell alienware_x15_r2_firmware
dell alienware_x15_r2
dell alienware_x15_r1_firmware
dell alienware_x15_r1
dell alienware_x14_firmware
dell alienware_x14
dell alienware_m17_r4_firmware
dell alienware_m17_r4
dell alienware_m17_r3_firmware
dell alienware_m17_r3
dell alienware_m15_r4_firmware
dell alienware_m15_r4
dell alienware_m15_r3_firmware
dell alienware_m15_r3
dell alienware_aurora_ryzen_edition_r14_firmware
dell alienware_aurora_ryzen_edition_r14
dell alienware_aurora_r15_amd_firmware
dell alienware_aurora_r15_amd
dell alienware_aurora_r15_firmware
dell alienware_aurora_r15
dell alienware_aurora_r13_firmware
dell alienware_aurora_r13
dell alienware_aurora_r12_firmware
dell alienware_aurora_r12
dell alienware_aurora_r11_firmware
dell alienware_aurora_r11
dell alienware_aurora_r10_firmware
dell alienware_aurora_r10
dell alienware_area_51m_r2_firmware
dell alienware_area_51m_r2

References

Frequently Asked Questions

What is CVE-2024-32858? +
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. It has a CVSS v3.1 base score of 7.5 (HIGH).
How severe is CVE-2024-32858? +
CVE-2024-32858 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-32858? +
CVE-2024-32858 affects products from dell, specifically: alienware_area_51m_r2, alienware_area_51m_r2_firmware, alienware_aurora_r10, alienware_aurora_r10_firmware, alienware_aurora_r11, alienware_aurora_r11_firmware, alienware_aurora_r12, alienware_aurora_r12_firmware, alienware_aurora_r13, alienware_aurora_r13_firmware, alienware_aurora_r15, alienware_aurora_r15_amd, alienware_aurora_r15_amd_firmware, alienware_aurora_r15_firmware, alienware_aurora_ryzen_edition_r14, alienware_aurora_ryzen_edition_r14_firmware, alienware_m15_r3, alienware_m15_r3_firmware, alienware_m15_r4, alienware_m15_r4_firmware, alienware_m17_r3, alienware_m17_r3_firmware, alienware_m17_r4, alienware_m17_r4_firmware, alienware_x14, alienware_x14_firmware, alienware_x15_r1, alienware_x15_r1_firmware, alienware_x15_r2, alienware_x15_r2_firmware, alienware_x17_r1, alienware_x17_r1_firmware, alienware_x17_r2, alienware_x17_r2_firmware, aurora_r16, aurora_r16_firmware, inspiron_15_3510, inspiron_15_3510_firmware, inspiron_15_3521, inspiron_15_3521_firmware, inspiron_3502, inspiron_3502_firmware, xps_8950, xps_8950_firmware, xps_8960, xps_8960_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-32858? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-32858 — free, no signup required.