Weak Authentication Vulnerability in Dell Client Platform BIOS
CVE-2024-52541

8.2HIGH

Key Information:

Vendor
Dell
Vendor
CVE Published:
19 February 2025

Summary

A weak authentication issue has been identified in the Dell Client Platform BIOS, allowing a high-privileged attacker with local access to potentially exploit the vulnerability. This exploitation could lead to an elevation of privileges, granting the attacker unauthorized control over the system. To mitigate this risk, it is essential for users to ensure they are running the latest BIOS versions and to implement robust security practices.

Affected Version(s)

Dell Client Platform BIOS < 1.34.0

Dell Client Platform BIOS < 1.28.0

Dell Client Platform BIOS < 1.21.0

References

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.