Latitude 12 Rugged Extreme 7214 Firmware CVE-2024-22429

MEDIUM

Improper Input Validation (CWE-20)

2024-05-17 security_alert@emc.com

RCE Dell Latitude 12 Rugged Extreme 7214 Firmware Latitude 5400 Firmware Latitude 5420 Rugged Firmware Latitude 5424 Rugged Firmware Latitude 5480 Firmware Latitude 5488 Firmware Latitude 5490 Firmware Latitude 5580 Firmware Latitude 5590 Firmware Embedded Box Pc 3000 Firmware Embedded Box Pc 5000 Firmware Latitude 7212 Rugged Extreme Tablet Firmware Latitude 7280 Firmware Latitude 7290 Firmware Latitude 7380 Firmware Latitude 7390 Firmware Latitude 7390 2 In 1 Firmware Latitude 7424 Rugged Extreme Firmware Latitude 7480 Firmware Latitude 7490 Firmware Precision 3620 Tower Firmware Precision 5530 2 In 1 Firmware Precision 7520 Firmware Precision 7720 Firmware Optiplex 3050 All In One Firmware Latitude 3180 Firmware Latitude 3189 Firmware Latitude 3190 Firmware Latitude 3190 2 In 1 Firmware Latitude 3300 Firmware Latitude 3390 2 In 1 Firmware Latitude 5290 Firmware Latitude 5290 2 In 1 Firmware Wyse 5070 Firmware Precision 3420 Tower Firmware Wyse 7040 Thin Client Firmware Edge Gateway 5000 Firmware Precision 5820 Tower Firmware Latitude 5280 Firmware Latitude 5288 Firmware Optiplex 3050 Firmware Optiplex 5050 Firmware Precision 3520 Firmware Precision 5520 Firmware Latitude 5414 Rugged Firmware Latitude 7414 Rugged Firmware Edge Gateway 3000 Firmware Latitude 13 3380 Firmware Latitude 7285 2 In 1 Firmware Optiplex 7450 All In One Firmware

6.7

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

6.7 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

May 17, 2024 - 16:15 nvd

MEDIUM 6.7

DescriptionNVD

Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.

AnalysisAI

Dell BIOS contains an Improper Input Validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution. Affected products include: Dell Edge Gateway 5000 Firmware, Dell Precision 5820 Tower Firmware, Dell Edge Gateway 3000 Firmware, Dell Embedded Box Pc 3000 Firmware, Dell Embedded Box Pc 5000 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Latitude 12 Rugged Extreme 7214 Firmware

View all

CVE-2024-52541 HIGH This Week

Dell Client Platform BIOS contains a Weak Authentication vulnerability. Rated high severity (CVSS 8.2), this vulnerabili

CVE-2025-36600 HIGH This Week

A remote code execution vulnerability in an externally developed component (CVSS 8.2). High severity vulnerability requi

CVE-2024-38483 MEDIUM This Month

Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. Rated medium severit

CVE-2024-0158 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28060 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28058 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28050 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28044 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28036 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28034 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28031 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

CVE-2023-28027 MEDIUM This Month

Dell BIOS contains an improper input validation vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is l

Same weakness CWE-20 – Improper Input Validation

View all

CVE-2021-44228 CRITICAL POC

CVE-2024-3400 CRITICAL POC

CVE-2022-47966 CRITICAL POC

CVE-2023-22515 CRITICAL POC

CVE-2009-0927 HIGH POC

CVE-2017-9791 CRITICAL POC

CVE-2017-15944 CRITICAL POC

CVE-2019-0604 CRITICAL POC

Same technique RCE

View all

CVE-2021-44228 CRITICAL POC

CVE-2017-7269 CRITICAL POC

CVE-2022-47966 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2023-3519 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2016-4117 CRITICAL POC

CVE-2015-3113 CRITICAL POC

Share

CVE-2024-22429 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy