Dell BIOS Vulnerability Could Lead to Information Disclosure
CVE-2024-32856
5.1MEDIUM
Summary
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
Affected Version(s)
CPG BIOS < 2.8.0
CPG BIOS < 1.0.24
CPG BIOS < 1.1.25
CVSS V3.1
Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published.
Vulnerability Reserved.
Collectors
NVD DatabaseMitre Database
Credit
Dell Technologies would like to thank Eason for reporting this issue.