CVE-2024-47238

🗓️ 12 Dec 2024 17:38:19Reported by dellType

Dell BIOS has improper input validation allowing local attackers to execute arbitrary code.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-47238	12 Dec 202417:46	–	circl
CNNVD	Dell Client Platform BIOS 输入验证错误漏洞	12 Dec 202400:00	–	cnnvd
CNVD	Dell Client Platform BIOS Input Validation Error Vulnerability	25 Feb 202500:00	–	cnvd
Cvelist	CVE-2024-47238	12 Dec 202417:38	–	cvelist
EUVD	EUVD-2024-42787	3 Oct 202520:07	–	euvd
NVD	CVE-2024-47238	12 Dec 202418:15	–	nvd
OSV	CVE-2024-47238	12 Dec 202418:15	–	osv
Vulnrichment	CVE-2024-47238	12 Dec 202417:38	–	vulnrichment
Tenable Nessus	Dell Client Platform BIOS Improper Input Validation (dsa-2024-355)	19 Dec 202400:00	–	nessus

NVD

Vulners

Node

dell embedded_box_pc_3000_firmwareRange<1.25.0

AND

dell embedded_box_pc_3000Match-

Node

dell edge_gateway_3001_firmwareRange<1.19.0

AND

dell edge_gateway_3001Match-

Node

dell edge_gateway_3002_firmwareRange<1.19.0

AND

dell edge_gateway_3002Match-

Node

dell edge_gateway_3003_firmwareRange<1.19.0

AND

dell edge_gateway_3003Match-

Node

dell edge_gateway_5000_firmwareRange<1.29.0

AND

dell edge_gateway_5000Match-

Node

dell edge_gateway_5100_firmwareRange<1.29.0

AND

dell edge_gateway_5100Match-

Node

dell edge_gateway_3000_firmwareRange<1.19.0

AND

dell edge_gateway_3000Match-

Node

dell edge_gateway_3200_firmwareRange<1.19.0

AND

dell edge_gateway_3200Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "Dell Client Platform BIOS",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "1.29.0",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      },
      {
        "lessThan": "1.19.0",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      },
      {
        "lessThan": "1.25.0",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
dell	www.dell.com/support/kbdoc/en-us/000227595/dsa-2024-355

04 Feb 2025 15:52Current

7.5High risk

Vulners AI Score7.5

CVSS 3.16.7 - 7.5

EPSS0.00052

SSVC

CWE-20