Dell BIOS Vulnerability Allows High-Privilege Attackers to bypass Secure Boot and Execute Arbitrary Code

CVE-2024-39584

Summary

The Dell Client Platform BIOS is vulnerable due to the use of a default cryptographic key, which can be exploited by high privileged attackers with local access. This vulnerability may allow for a bypass of Secure Boot mechanisms, potentially leading to arbitrary code execution. As a result, attackers could jeopardize system integrity, execute unauthorized commands, or further compromise the device's security. Organizations using affected Dell devices should evaluate their risk exposure and ensure they take necessary actions to mitigate this vulnerability.

References