CVE-2024-47238

HIGH

Dell Embedded Box PC 3000 Firmware < 1.25.0 - Arbitrary Code Execution

Title source: llm

Description

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory

https://www.dell.com/support/kbdoc/en-us/000227595/dsa-2024-355

Scores

CVSS v3 7.5

EPSS 0.0005

EPSS Percentile 16.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-20

Status published

Products (8)

dell/edge_gateway_3000_firmware < 1.19.0

dell/edge_gateway_3001_firmware < 1.19.0

dell/edge_gateway_3002_firmware < 1.19.0

dell/edge_gateway_3003_firmware < 1.19.0

dell/edge_gateway_3200_firmware < 1.19.0

dell/edge_gateway_5000_firmware < 1.29.0

dell/edge_gateway_5100_firmware < 1.29.0

dell/embedded_box_pc_3000_firmware < 1.25.0

Published Dec 12, 2024

Tracked Since Feb 18, 2026