CVE-2024-39584
HIGHDescription
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.
Is your site exposed to CVE-2024-39584?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| dell | xps_8960_firmware |
| dell | xps_8960 |
| dell | xps_8950_firmware |
| dell | xps_8950 |
| dell | inspiron_3502_firmware |
| dell | inspiron_3502 |
| dell | inspiron_15_3521_firmware |
| dell | inspiron_15_3521 |
| dell | inspiron_15_3510_firmware |
| dell | inspiron_15_3510 |
| dell | aurora_r16_firmware |
| dell | aurora_r16 |
| dell | alienware_x17_r2_firmware |
| dell | alienware_x17_r2 |
| dell | alienware_x17_r1_firmware |
| dell | alienware_x17_r1 |
| dell | alienware_x15_r2_firmware |
| dell | alienware_x15_r2 |
| dell | alienware_x15_r1_firmware |
| dell | alienware_x15_r1 |
| dell | alienware_x14_firmware |
| dell | alienware_x14 |
| dell | alienware_m17_r4_firmware |
| dell | alienware_m17_r4 |
| dell | alienware_m17_r3_firmware |
| dell | alienware_m17_r3 |
| dell | alienware_m15_r4_firmware |
| dell | alienware_m15_r4 |
| dell | alienware_m15_r3_firmware |
| dell | alienware_m15_r3 |
| dell | alienware_aurora_ryzen_edition_r14_firmware |
| dell | alienware_aurora_ryzen_edition_r14 |
| dell | alienware_aurora_r15_amd_firmware |
| dell | alienware_aurora_r15_amd |
| dell | alienware_aurora_r15_firmware |
| dell | alienware_aurora_r15 |
| dell | alienware_aurora_r13_firmware |
| dell | alienware_aurora_r13 |
| dell | alienware_area_51m_r2_firmware |
| dell | alienware_area_51m_r2 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-39584? +
How severe is CVE-2024-39584? +
What products are affected by CVE-2024-39584? +
How do I check if I'm vulnerable to CVE-2024-39584? +
Related Vulnerabilities
Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, might …
If misconfigured, alpitronic Hypercharger EV charging devices can expose a web interface protected by authentication. If the default credentials are …
Longse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device, create a WiFi network with …
A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical …
NetBird VPN when installed using vendor's provided script failed to remove or change default password of an admin account created …
Legacy Vivotek Device firmware uses default credetials for the root and user login accounts.