4.4

CVE-2024-32855

Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
DellInspiron 3480 Firmware Version < 1.30.0
   DellInspiron 3480 Version-
DellInspiron 3580 Firmware Version < 1.30.0
   DellInspiron 3580 Version-
DellLatitude 3120 Firmware Version < 1.26.0
   DellLatitude 3120 Version-
DellLatitude 3190 Firmware Version < 1.34.0
   DellLatitude 3190 Version-
DellLatitude 3190 2-in-1 Firmware Version < 1.34.0
   DellLatitude 3190 2-in-1 Version-
DellLatitude 3300 Firmware Version < 1.28.0
   DellLatitude 3300 Version-
DellLatitude 3310 Firmware Version < 1.25.0
   DellLatitude 3310 Version-
DellLatitude 3310 2-in-1 Firmware Version < 1.24.0
   DellLatitude 3310 2-in-1 Version-
DellLatitude 3390 2-in-1 Firmware Version < 1.31.0
   DellLatitude 3390 2-in-1 Version-
DellLatitude 5288 Firmware Version < 1.36.0
   DellLatitude 5288 Version-
DellLatitude 5290 Firmware Version < 1.35.0
   DellLatitude 5290 Version-
DellLatitude 5290 2-in-1 Firmware Version < 1.34.0
   DellLatitude 5290 2-in-1 Version-
DellLatitude 5300 Firmware Version < 1.31.0
   DellLatitude 5300 Version-
DellLatitude 5300 2-in-1 Firmware Version < 1.31.0
   DellLatitude 5300 2-in-1 Version-
DellLatitude 5310 Firmware Version < 1.24.0
   DellLatitude 5310 Version-
DellLatitude 5310 2-in-1 Firmware Version < 1.24.0
   DellLatitude 5310 2-in-1 Version-
DellLatitude 5400 Firmware Version < 1.30.0
   DellLatitude 5400 Version-
DellLatitude 5401 Firmware Version < 1.31.0
   DellLatitude 5401 Version-
DellLatitude 5410 Firmware Version < 1.28.0
   DellLatitude 5410 Version-
DellLatitude 5411 Firmware Version < 1.29.0
   DellLatitude 5411 Version-
DellLatitude 5420 Rugged Firmware Version < 1.32.0
   DellLatitude 5420 Rugged Version-
DellLatitude 5424 Rugged Firmware Version < 1.32.0
   DellLatitude 5424 Rugged Version-
DellLatitude 5480 Firmware Version < 1.36.0
   DellLatitude 5480 Version-
DellLatitude 5488 Firmware Version < 1.36.0
   DellLatitude 5488 Version-
DellLatitude 5490 Firmware Version < 1.35.0
   DellLatitude 5490 Version-
DellLatitude 5491 Firmware Version < 1.33.0
   DellLatitude 5491 Version-
DellLatitude 5500 Firmware Version < 1.30.0
   DellLatitude 5500 Version-
DellLatitude 5501 Firmware Version < 1.31.0
   DellLatitude 5501 Version-
DellLatitude 5510 Firmware Version < 1.28.0
   DellLatitude 5510 Version-
DellLatitude 5511 Firmware Version < 1.29.0
   DellLatitude 5511 Version-
DellLatitude 5580 Firmware Version < 1.36.0
   DellLatitude 5580 Version-
DellLatitude 5590 Firmware Version < 1.35.0
   DellLatitude 5590 Version-
DellLatitude 5591 Firmware Version < 1.33.0
   DellLatitude 5591 Version-
DellLatitude 7200 2-in-1 Firmware Version < 1.29.0
   DellLatitude 7200 2-in-1 Version-
DellLatitude 7210 2-in-1 Firmware Version < 1.30.0
   DellLatitude 7210 2-in-1 Version-
DellLatitude 7280 Firmware Version < 1.37.0
   DellLatitude 7280 Version-
DellLatitude 7290 Firmware Version < 1.38.0
   DellLatitude 7290 Version-
DellLatitude 7300 Firmware Version < 1.31.0
   DellLatitude 7300 Version-
DellLatitude 7310 Firmware Version < 1.30.0
   DellLatitude 7310 Version-
DellLatitude 7380 Firmware Version < 1.37.0
   DellLatitude 7380 Version-
DellLatitude 7390 Firmware Version < 1.38.0
   DellLatitude 7390 Version-
DellLatitude 7390 2-in-1 Firmware Version < 1.35.0
   DellLatitude 7390 2-in-1 Version-
DellLatitude 7400 Firmware Version < 1.31.0
   DellLatitude 7400 Version-
DellLatitude 7400 2-in-1 Firmware Version < 1.28.0
   DellLatitude 7400 2-in-1 Version-
DellLatitude 7410 Firmware Version < 1.30.0
   DellLatitude 7410 Version-
DellLatitude 7480 Firmware Version < 1.37.0
   DellLatitude 7480 Version-
DellLatitude 7490 Firmware Version < 1.38.0
   DellLatitude 7490 Version-
DellLatitude 9410 Firmware Version < 1.29.0
   DellLatitude 9410 Version-
DellLatitude 9510 2in1 Firmware Version < 1.28.0
   DellLatitude 9510 2in1 Version-
DellLatitude Rugged 7220ex Firmware Version < 1.36.0
   DellLatitude Rugged 7220ex Version-
DellPrecision 3520 Firmware Version < 1.36.0
   DellPrecision 3520 Version-
DellPrecision 3530 Firmware Version < 1.33.0
   DellPrecision 3530 Version-
DellPrecision 3540 Firmware Version < 1.30.0
   DellPrecision 3540 Version-
DellPrecision 3541 Firmware Version < 1.31.0
   DellPrecision 3541 Version-
DellPrecision 3550 Firmware Version < 1.28.0
   DellPrecision 3550 Version-
DellPrecision 3551 Firmware Version < 1.29.0
   DellPrecision 3551 Version-
DellPrecision 5530 Firmware Version < 1.37.0
   DellPrecision 5530 Version-
DellPrecision 5530 2-in-1 Firmware Version < 1.31.8
   DellPrecision 5530 2-in-1 Version-
DellPrecision 5540 Firmware Version < 1.28.0
   DellPrecision 5540 Version-
DellPrecision 7530 Firmware Version < 1.34.0
   DellPrecision 7530 Version-
DellPrecision 7540 Firmware Version < 1.32.0
   DellPrecision 7540 Version-
DellPrecision 7550 Firmware Version < 1.31.0
   DellPrecision 7550 Version-
DellPrecision 7730 Firmware Version < 1.34.0
   DellPrecision 7730 Version-
DellPrecision 7740 Firmware Version < 1.32.0
   DellPrecision 7740 Version-
DellPrecision 7750 Firmware Version < 1.31.0
   DellPrecision 7750 Version-
DellVostro 3480 Firmware Version < 1.30.0
   DellVostro 3480 Version-
DellVostro 3580 Firmware Version < 1.30.0
   DellVostro 3580 Version-
DellVostro 3583 Firmware Version < 1.30.0
   DellVostro 3583 Version-
DellWyse 5470 Firmware Version < 1.25.0
   DellWyse 5470 Version-
DellWyse 5470 All-in-one Firmware Version < 1.26.0
   DellWyse 5470 All-in-one Version-
DellXps 15 7590 Firmware Version < 1.28.0
   DellXps 15 7590 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.189
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.4 0.8 3.6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
security_alert@emc.com 3.8 0.3 3.4
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.