CVE-2024-39584

HIGH
Published Aug 28, 2024 Modified Dec 20, 2024 CWE-1392

Description

Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.

Is your site exposed to CVE-2024-39584?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

8.2
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness Type (CWE)

CWE-1392 CWE-1392

Affected Products

Vendor Product
dell xps_8960_firmware
dell xps_8960
dell xps_8950_firmware
dell xps_8950
dell inspiron_3502_firmware
dell inspiron_3502
dell inspiron_15_3521_firmware
dell inspiron_15_3521
dell inspiron_15_3510_firmware
dell inspiron_15_3510
dell aurora_r16_firmware
dell aurora_r16
dell alienware_x17_r2_firmware
dell alienware_x17_r2
dell alienware_x17_r1_firmware
dell alienware_x17_r1
dell alienware_x15_r2_firmware
dell alienware_x15_r2
dell alienware_x15_r1_firmware
dell alienware_x15_r1
dell alienware_x14_firmware
dell alienware_x14
dell alienware_m17_r4_firmware
dell alienware_m17_r4
dell alienware_m17_r3_firmware
dell alienware_m17_r3
dell alienware_m15_r4_firmware
dell alienware_m15_r4
dell alienware_m15_r3_firmware
dell alienware_m15_r3
dell alienware_aurora_ryzen_edition_r14_firmware
dell alienware_aurora_ryzen_edition_r14
dell alienware_aurora_r15_amd_firmware
dell alienware_aurora_r15_amd
dell alienware_aurora_r15_firmware
dell alienware_aurora_r15
dell alienware_aurora_r13_firmware
dell alienware_aurora_r13
dell alienware_area_51m_r2_firmware
dell alienware_area_51m_r2

References

Frequently Asked Questions

What is CVE-2024-39584? +
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution. It has a CVSS v3.1 base score of 8.2 (HIGH).
How severe is CVE-2024-39584? +
CVE-2024-39584 has a CVSS v3.1 score of 8.2 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-39584? +
CVE-2024-39584 affects products from dell, specifically: alienware_area_51m_r2, alienware_area_51m_r2_firmware, alienware_aurora_r13, alienware_aurora_r13_firmware, alienware_aurora_r15, alienware_aurora_r15_amd, alienware_aurora_r15_amd_firmware, alienware_aurora_r15_firmware, alienware_aurora_ryzen_edition_r14, alienware_aurora_ryzen_edition_r14_firmware, alienware_m15_r3, alienware_m15_r3_firmware, alienware_m15_r4, alienware_m15_r4_firmware, alienware_m17_r3, alienware_m17_r3_firmware, alienware_m17_r4, alienware_m17_r4_firmware, alienware_x14, alienware_x14_firmware, alienware_x15_r1, alienware_x15_r1_firmware, alienware_x15_r2, alienware_x15_r2_firmware, alienware_x17_r1, alienware_x17_r1_firmware, alienware_x17_r2, alienware_x17_r2_firmware, aurora_r16, aurora_r16_firmware, inspiron_15_3510, inspiron_15_3510_firmware, inspiron_15_3521, inspiron_15_3521_firmware, inspiron_3502, inspiron_3502_firmware, xps_8950, xps_8950_firmware, xps_8960, xps_8960_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-39584? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-39584 — free, no signup required.