What is the CVSS score of CVE-2024-32856?

CVE-2024-32856 has a CVSS 3.1 base score of 6.0 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Xps 8960 Firmware CVE-2024-32856

MEDIUM

Improper Input Validation (CWE-20)

2024-06-13 security_alert@emc.com

Information Disclosure Dell Xps 8960 Firmware Xps 8950 Firmware Inspiron 3502 Firmware Inspiron 15 3521 Firmware Inspiron 15 3510 Firmware Aurora R16 Firmware Alienware X17 R2 Firmware Alienware X17 R1 Firmware Alienware X15 R2 Firmware Alienware X15 R1 Firmware Alienware X14 Firmware Alienware M17 R4 Firmware Alienware M17 R3 Firmware Alienware M15 R4 Firmware Alienware M15 R3 Firmware Alienware Aurora Ryzen Edition R14 Firmware Alienware Aurora R15 Amd Firmware Alienware Aurora R15 Firmware Alienware Aurora R13 Firmware Alienware Aurora R12 Firmware Alienware Aurora R11 Firmware Alienware Aurora R10 Firmware Alienware Area 51M R2 Firmware

6.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.0 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Jun 13, 2024 - 12:15 nvd

MEDIUM 6.0

DescriptionNVD

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

AnalysisAI

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. Rated medium severity (CVSS 6.0), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure. Affected products include: Dell Xps 8960 Firmware, Dell Xps 8950 Firmware, Dell Inspiron 3502 Firmware, Dell Inspiron 15 3521 Firmware, Dell Inspiron 15 3510 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.