What is the CVSS score of CVE-2024-38483?

CVE-2024-38483 has a CVSS 3.1 base score of 6.7 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Latitude 12 Rugged Extreme 7214 Firmware CVE-2024-38483

MEDIUM

Improper Input Validation (CWE-20)

2024-08-14 security_alert@emc.com

RCE Dell Latitude 12 Rugged Extreme 7214 Firmware Latitude 5400 Firmware Latitude 5420 Rugged Firmware Latitude 5424 Rugged Firmware Latitude 5480 Firmware Latitude 5488 Firmware Latitude 5490 Firmware Latitude 5580 Firmware Latitude 5590 Firmware Embedded Box Pc 5000 Firmware Latitude 7212 Rugged Extreme Tablet Firmware Latitude 7280 Firmware Latitude 7290 Firmware Latitude 7380 Firmware Latitude 7390 Firmware Latitude 7390 2 In 1 Firmware Latitude 7424 Rugged Extreme Firmware Latitude 7480 Firmware Latitude 7490 Firmware Precision 5530 2 In 1 Firmware Precision 7520 Firmware Precision 7720 Firmware Optiplex 3050 All In One Firmware Latitude 3300 Firmware Latitude 3390 2 In 1 Firmware Latitude 5290 Firmware Latitude 5290 2 In 1 Firmware Precision 3420 Tower Firmware Wyse 7040 Thin Client Firmware Latitude 5280 Firmware Latitude 5288 Firmware Optiplex 3050 Firmware Optiplex 5050 Firmware Precision 3520 Firmware Precision 3620 Firmware Precision 5520 Firmware Latitude 5414 Rugged Firmware Latitude 7414 Rugged Firmware Latitude 13 3380 Firmware Latitude 7285 2 In 1 Firmware Optiplex 7450 All In One Firmware

6.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.7 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Aug 14, 2024 - 10:15 nvd

MEDIUM 6.7

DescriptionNVD

Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

AnalysisAI

Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. Affected products include: Dell Latitude 5290 2-In-1 Firmware, Dell Precision 3420 Tower Firmware, Dell Precision 3620 Firmware, Dell Wyse 7040 Thin Client Firmware, Dell Precision 7720 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.