CVE-2024-28970

🗓️ 12 Jun 2024 06:51:49Reported by dellType

Dell BIOS Out-of-bounds Write vulnerability, platform denial of service

Reporter	Title	Published	Views	Family All 10
CNNVD	Dell BIOS 缓冲区错误漏洞	12 Jun 202400:00	–	cnnvd
CNVD	Dell BIOS Buffer Overflow Vulnerability (CNVD-2024-29342)	18 Jun 202400:00	–	cnvd
Cvelist	CVE-2024-28970	12 Jun 202406:51	–	cvelist
Tenable Nessus	Dell Client BIOS DoS (DSA-2024-168)	21 Jun 202400:00	–	nessus
EUVD	EUVD-2024-26032	3 Oct 202520:07	–	euvd
NVD	CVE-2024-28970	12 Jun 202407:15	–	nvd
OSV	CVE-2024-28970	12 Jun 202407:15	–	osv
Positive Technologies	PT-2024-22653 · Dell · Dell Client Bios	12 Jun 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-28970	23 May 202508:55	–	redhatcve
Vulnrichment	CVE-2024-28970	12 Jun 202406:51	–	vulnrichment

NVD

Vulners

Node

dell vostro_5502_firmwareRange<1.30.0

AND

dell vostro_5502Match-

Node

dell vostro_5402_firmwareRange<1.30.0

AND

dell vostro_5402Match-

Node

dell precision_3660_firmwareRange<2.14.0

AND

dell precision_3660Match-

Node

dell inspiron_5509_firmwareRange<1.30.0

AND

dell inspiron_5509Match-

Node

dell inspiron_5502_firmwareRange<1.30.0

AND

dell inspiron_5502Match-

Node

dell inspiron_5409_firmwareRange<1.30.0

AND

dell inspiron_5409Match-

Node

dell inspiron_5402_firmwareRange<1.30.0

AND

dell inspiron_5402Match-

Node

dell inspiron_27_7720_all-in-one_firmwareRange<1.11.0

AND

dell inspiron_27_7720_all-in-oneMatch-

Node

dell inspiron_24_5420_all-in-one_firmwareRange<1.11.0

AND

dell inspiron_24_5420_all-in-oneMatch-

Node

dell inspiron_16_plus_7640_firmwareRange<1.6.0

AND

dell inspiron_16_plus_7640Match-

Node

dell inspiron_16_7640_2-in-1_firmwareRange<1.4.0

AND

dell inspiron_16_7640_2-in-1Match-

Node

dell inspiron_14_plus_7440_firmwareRange<1.6.0

AND

dell inspiron_14_plus_7440Match-

Node

dell g7_7700_firmwareRange<1.32.0

AND

dell g7_7700Match-

Node

dell g7_7500_firmwareRange<1.32.0

AND

dell g7_7500Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "CPG BIOS",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "1.32.0",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      },
      {
        "lessThan": "1.6.0",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      },
      {
        "lessThan": "1.4.0",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      },
      {
        "lessThan": "1.11.0",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      },
      {
        "lessThan": "1.30.0",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      },
      {
        "lessThan": "2.14.0",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
dell	www.dell.com/support/kbdoc/en-us/000225476/dsa-2024-168

21 Nov 2024 09:07Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.14.4 - 4.7

EPSS0.00046

SSVC

CWE-787