CVE-2024-0160

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-0160
Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS.

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000224763/dsa-2024-122 Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000224763/dsa-2024-122 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dell:xps_17_9700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_17_9700:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dell:xps_15_9500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_15_9500:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dell:vostro_7500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_7500:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:dell:precision_5750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_5750:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:dell:precision_5550_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_5550:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:dell:latitude_3520_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3520:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:dell:latitude_3510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3510:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:dell:latitude_3420_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3420:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:dell:latitude_3410_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3410:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:dell:inspiron_7501_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7501:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:dell:inspiron_7500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7500:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:dell:g7_7700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:g7_7700:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:dell:g7_7500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:g7_7500:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:dell:g5_5500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:g5_5500:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:dell:g3_3500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:g3_3500:-:*:*:*:*:*:*:*
History

21 Nov 2024, 08:45

Type Values Removed Values Added
References () https://www.dell.com/support/kbdoc/en-us/000224763/dsa-2024-122 - Vendor Advisory () https://www.dell.com/support/kbdoc/en-us/000224763/dsa-2024-122 - Vendor Advisory

25 Sep 2024, 14:25

Type Values Removed Values Added
References () https://www.dell.com/support/kbdoc/en-us/000224763/dsa-2024-122 - () https://www.dell.com/support/kbdoc/en-us/000224763/dsa-2024-122 - Vendor Advisory
CPE cpe:2.3:o:dell:latitude_3410_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:g5_5500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:g3_3500:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:g7_7500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:latitude_3420_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_7501_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_5550:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:xps_15_9500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:latitude_3520_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:g7_7700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3510:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7500:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:precision_5750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3520:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:g5_5500:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:precision_5750:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_17_9700:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:g3_3500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:precision_5550_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:vostro_7500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_7500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:vostro_7500:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:xps_17_9700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3420:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:g7_7700:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:latitude_3510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7501:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:g7_7500:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:latitude_3410:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:xps_15_9500:-:*:*:*:*:*:*:*
First Time Dell xps 15 9500
Dell g7 7700 Firmware
Dell precision 5750
Dell inspiron 7501
Dell latitude 3520
Dell precision 5550 Firmware
Dell vostro 7500
Dell latitude 3410
Dell g7 7500 Firmware
Dell inspiron 7500 Firmware
Dell latitude 3410 Firmware
Dell inspiron 7500
Dell precision 5750 Firmware
Dell latitude 3510 Firmware
Dell g7 7700
Dell g5 5500
Dell xps 17 9700 Firmware
Dell vostro 7500 Firmware
Dell xps 15 9500 Firmware
Dell precision 5550
Dell g3 3500
Dell latitude 3510
Dell g3 3500 Firmware
Dell inspiron 7501 Firmware
Dell latitude 3420 Firmware
Dell latitude 3420
Dell xps 17 9700
Dell g5 5500 Firmware
Dell
Dell latitude 3520 Firmware
Dell g7 7500

13 Jun 2024, 18:36

Type Values Removed Values Added
Summary
  • (es) Dell Client Platform contiene una vulnerabilidad de autorización incorrecta. Un atacante con acceso físico al sistema podría explotar esta vulnerabilidad al eludir la autorización del BIOS para modificar la configuración del BIOS.

12 Jun 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-12 07:15

Updated : 2024-11-21 08:45

NVD link : CVE-2024-0160

Mitre link : CVE-2024-0160

CVE.ORG link : CVE-2024-0160

JSON object : View

Products Affected

dell

  • inspiron_7501
  • latitude_3510_firmware
  • g7_7500
  • xps_17_9700
  • g3_3500_firmware
  • latitude_3410_firmware
  • inspiron_7500_firmware
  • inspiron_7501_firmware
  • xps_17_9700_firmware
  • inspiron_7500
  • g5_5500
  • vostro_7500_firmware
  • latitude_3410
  • g7_7500_firmware
  • latitude_3520
  • g7_7700
  • precision_5550_firmware
  • g3_3500
  • latitude_3520_firmware
  • latitude_3420_firmware
  • precision_5550
  • latitude_3510
  • g5_5500_firmware
  • xps_15_9500_firmware
  • precision_5750
  • vostro_7500
  • precision_5750_firmware
  • xps_15_9500
  • latitude_3420
  • g7_7700_firmware
CWE
CWE-863

Incorrect Authorization