CVE-2024-0160

MEDIUM

Dell Client Platform Firmware - Unauthenticated BIOS Authorization Bypass via Physical Access

Title source: llm
STIX 2.1

Description

Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS.

References (1)

Core 1
Core References

Scores

CVSS v3 6.8
EPSS 0.0004
EPSS Percentile 13.8%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-863
Status published
Products (15)
dell/g3_3500_firmware < 1.30.0
dell/g5_5500_firmware < 1.30.0
dell/g7_7500_firmware < 1.32.0
dell/g7_7700_firmware < 1.32.0
dell/inspiron_7500_firmware < 1.28.0
dell/inspiron_7501_firmware < 1.28.0
dell/latitude_3410_firmware < 1.29.0
dell/latitude_3420_firmware < 1.36.0
dell/latitude_3510_firmware < 1.29.0
dell/latitude_3520_firmware < 1.36.0
... and 5 more
Published Jun 12, 2024
Tracked Since Feb 18, 2026