166 matches found
CVE-2024-47238
CVE-2024-47238 affects Dell Client Platform BIOS. Vulnerability: Improper Input Validation in an externally developed component. Attack scenario: a high-privilege attacker with local access could potentially execute arbitrary code. Documents indicate the issue involves a local attacker, with high...
CVE-2024-47238: Improper Input Validation
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...
CVE-2024-52537
CVE-2024-52537 affects Dell Client Platform Firmware Update Utility (Dell Client Platform). The vulnerability is described as an Improper Link Resolution issue in the updater, with a local attacker using high privileges to achieve Elevation of Privileges . Several connected sources corroborate: D...
Dell Client Platform 安全漏洞
Dell Client Platform is client platform software provided by Dell Dell that is primarily used to manage the configuration and functionality of enterprise client computers. Dell Client Platform has an incorrect link resolution vulnerability that can be exploited by an attacker to cause an elevatio...
CVE-2024-52537: UNIX Symbolic Link (Symlink) Following
Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2024-39584
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution...
CVE-2024-39584
Dell CVE-2024-39584 concerns the Dell Client Platform BIOS using a default cryptographic key. Multiple sources (Dell DSA-2024-354, Nessus DSA-2024-354 plugin, NVD/CVE record) describe that a high-privileged local attacker could bypass Secure Boot and execute arbitrary code due to this key weaknes...
CVE-2024-39584: Use of Default Credentials
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution...
Dell Client Platform和Dell Dock Firmware 后置链接漏洞
Dell Client Platform and Dell Dock Firmware are both products of Dell Inc.Dell Client Platform is a client platform.Dell Dock Firmware is a firmware. A backlink vulnerability exists in Dell Dock Firmware and Dell Client Platform that stems from improper link resolution during installation, which...
CVE-2023-43078: Improper Link Resolution Before File Access
Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service...
Dell Client Platform 安全漏洞
Dell Client Platform is a client platform from Dell USA. A security vulnerability exists in the Dell Client Platform BIOS that stems from the use of a default encryption key. An attacker could exploit the vulnerability to execute arbitrary code...
PT-2024-13076 · Dell · Dell Dock Firmware +1
Name of the Vulnerable Software and Affected Versions: Dell Dock Firmware affected versions not specified Dell Client Platform affected versions not specified Description: The issue is related to an Improper Link Resolution vulnerability during installation, resulting in arbitrary folder deletion...
Dell Client Platform BIOS Buffer Overflow Vulnerability
Dell Client Platform is a client platform from Dell USA. The Dell Client Platform BIOS suffers from a buffer overflow vulnerability that originates from a boundary error in an externally developed component when handling untrusted input. An attacker with elevated privileges and local access could...
CVE-2024-32855
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
CVE-2024-32855
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
CVE-2024-32855
The CVE-2024-32855 entry concerns Dell Client Platform BIOS where an externally developed component exposes an out-of-bounds write (boundary error) when handling untrusted input. The vulnerability can be exploited by a locally privileged attacker with high privileges and local access, potentially...
CVE-2024-32855
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
Dell Client Platform BIOS 缓冲区错误漏洞
Dell Client Platform is a client platform from Dell USA. The Dell Client Platform BIOS suffers from a buffer overflow vulnerability that originates from a boundary error in an externally developed component when handling untrusted input. An attacker with elevated privileges and local access could...
CVE-2024-32855: Out-of-bounds Write
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
Dell Client BIOS DoS (DSA-2024-168)
Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of service. Note that Nessus has not tested for this issue but has instead relied only on the...