Latitude 5290 2 In 1 Firmware CVE-2024-38483

MEDIUM

Improper Input Validation (CWE-20)

2024-08-14 security_alert@emc.com

RCE Dell Latitude 5290 2 In 1 Firmware Precision 3420 Tower Firmware Precision 3620 Firmware Wyse 7040 Thin Client Firmware Precision 7720 Firmware Precision 7520 Firmware Precision 5530 2 In 1 Firmware Precision 5520 Firmware Precision 3520 Firmware Optiplex 7450 All In One Firmware Optiplex 5050 Firmware Optiplex 3050 All In One Firmware Optiplex 3050 Firmware Latitude 7490 Firmware Latitude 7480 Firmware Latitude 7424 Rugged Extreme Firmware Latitude 7414 Rugged Firmware Latitude 7390 2 In 1 Firmware Latitude 7390 Firmware Latitude 7380 Firmware Latitude 7290 Firmware Latitude 7285 2 In 1 Firmware Latitude 7280 Firmware Latitude 7212 Rugged Extreme Tablet Firmware Latitude 5590 Firmware Latitude 5580 Firmware Latitude 5490 Firmware Latitude 5488 Firmware Latitude 5480 Firmware Latitude 5424 Rugged Firmware Latitude 5420 Rugged Firmware Latitude 5414 Rugged Firmware Latitude 5400 Firmware Latitude 5290 Firmware Latitude 5288 Firmware Latitude 5280 Firmware Latitude 3390 2 In 1 Firmware Latitude 3300 Firmware Latitude 13 3380 Firmware Latitude 12 Rugged Extreme 7214 Firmware Embedded Box Pc 5000 Firmware

6.7

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

6.7 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Aug 14, 2024 - 10:15 nvd

MEDIUM 6.7

DescriptionNVD

Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

AnalysisAI

Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. Affected products include: Dell Latitude 5290 2-In-1 Firmware, Dell Precision 3420 Tower Firmware, Dell Precision 3620 Firmware, Dell Wyse 7040 Thin Client Firmware, Dell Precision 7720 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Latitude 5290 2 In 1 Firmware

View all

CVE-2024-52541 HIGH This Week

Dell Client Platform BIOS contains a Weak Authentication vulnerability. Rated high severity (CVSS 8.2), this vulnerabili

CVE-2022-32493 HIGH This Week

Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. Rated high severity (CVSS 7.8), this vulnerability is l

CVE-2022-32491 HIGH This Week

Dell Client BIOS contains a Buffer Overflow vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low att

CVE-2022-32489 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-32488 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-32487 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-32485 HIGH This Week

Dell BIOS contains an improper input validation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2022-26861 HIGH This Week

Dell BIOS versions contain an Insecure Automated Optimization vulnerability. Rated high severity (CVSS 7.8), this vulner

CVE-2022-26860 HIGH This Week

Dell BIOS versions contain a stack-based buffer overflow vulnerability. Rated high severity (CVSS 7.8), this vulnerabili

CVE-2022-26858 HIGH This Week

Dell BIOS versions contain an Improper Authentication vulnerability. Rated high severity (CVSS 7.8), this vulnerability

CVE-2022-26859 HIGH This Week

Dell BIOS contains a race condition vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

CVE-2019-3717 MEDIUM This Month

Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. Rated medium severity (CV

Same weakness CWE-20 – Improper Input Validation

View all

CVE-2021-44228 CRITICAL POC

CVE-2024-3400 CRITICAL POC

CVE-2022-47966 CRITICAL POC

CVE-2023-22515 CRITICAL POC

CVE-2009-0927 HIGH POC

CVE-2017-9791 CRITICAL POC

CVE-2017-15944 CRITICAL POC

CVE-2019-0604 CRITICAL POC

Same technique RCE

View all

CVE-2017-7269 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2016-4117 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2025-53770 CRITICAL POC

CVE-2020-7961 CRITICAL POC

Share

CVE-2024-38483 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy