CVE-2024-39584

Dell CVE-2024-39584 concerns the Dell Client Platform BIOS using a default cryptographic key. Multiple sources (Dell DSA-2024-354, Nessus DSA-2024-354 plugin, NVD/CVE record) describe that a high-privileged local attacker could bypass Secure Boot and execute arbitrary code due to this key weaknes...

CVE-2024-32858

CVE-2024-32858 : Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A local, high-privilege attacker could potentially exploit this to achieve code execution. The affected product is Dell Client Platform BIOS; the underlying issue i...

CVE-2024-32859

CVE-2024-32859 affects Dell Client Platform BIOS. The flaw is an Improper Input Validation in an externally developed component, enabling a locally privileged attacker with access to potentially achieve code execution. Affected software is Dell Client Platform BIOS (BIOS embedded on motherboard)....

CVE-2023-28036

Dell BIOS contains an improper input validation vulnerability that can be exploited by a local authenticated attacker with administrator privileges to modify a UEFI variable. Affected: Dell BIOS on Dell systems. Root cause: improper input validation. Impact: potential modification of UEFI variabl...

CVE-2024-32860

CVE-2024-32860 affects Dell Client Platform BIOS. Description confirms an Improper Input Validation vulnerability in an externally developed component that could allow a highly-privileged local attacker to achieve code execution. Reported impact and conditions are consistent across sources (Dell ...

CVE-2023-28050

The vulnerability CVE-2023-28050 affects Dell BIOS (embedded firmware) where improper input validation could allow a local authenticated attacker with administrator privileges to modify a UEFI variable. Root cause: faulty input validation in Dell BIOS code. Impact: potential integrity/availabilit...

CVE-2024-32856

Dell CVE-2024-32856 affects Dell Client Platform BIOS with an Improper Input Validation vulnerability in an externally developed component. A high-privilege attacker with local access could potentially cause information disclosure. The available documents describe the vulnerable software as Dell ...

CVE-2023-28060

Dell BIOS contains an improper input validation vulnerability (CVE-2023-28060). A local authenticated attacker with administrator privileges may exploit this to modify a UEFI variable. Affected component is BIOS firmware; root cause is input validation failure. Impact is elevation/modification of...

CVE-2023-28034

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated attacker with administrator privileges to modify a UEFI variable. Affected component is the Dell BIOS/Uefi interface on Dell systems. Root cause: improper input validation in the BIOS that handles...

CVE-2023-28058

CVE-2023-28058 describes an improper input validation vulnerability in Dell BIOS. A local authenticated attacker with administrator privileges may exploit this to modify a UEFI variable. Affected component: Dell BIOS; root cause: input validation flaw in BIOS handling of UEFI variables. Impacts r...

CVE-2023-25938

CVE-2023-25938 describes an improper input validation vulnerability in Dell BIOS that can allow a local, authenticated attacker with administrator privileges to modify a UEFI variable. The issue is tied to the BIOS/firmware handling of input and does not include explicit exploit details in the pr...

CVE-2023-28031

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated administrator to modify a UEFI variable. Affected component is Dell BIOS (embedded firmware on Dell systems); root cause is input validation failure when handling UEFI variables. The vulnerability...

CVE-2023-28033

CVSS context and impact : CVE-2023-28033 affects Dell BIOS (UEFI support code) through an improper input validation vulnerability. A local authenticated user with administrator privileges can potentially exploit this to modify a UEFI variable (impact: confidentiality, integrity, availability rate...

CVE-2023-28027

Dell BIOS on Dell systems contains an improper input validation vulnerability that enables a local authenticated administrator to modify a UEFI variable. The root cause is insufficient validation in the BIOS input handling, allowing manipulation of UEFI state. The impact, as stated, includes pote...

CVE-2023-28039

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated user with administrator privileges to modify a UEFI variable. The issue affects Dell BIOS firmware and is described across multiple sources (e.g., Dell KB article DSA-2023-099). No exploitation de...

CVE-2023-25937

Dell BIOS contains an improper input validation vulnerability that could allow a local, authenticated administrator to modify a UEFI variable. The CVE-2023-25937 entry is supported by multiple sources (NVD, CVE list, CNNVD, PRION, etc.). Reported impact includes potential changes to UEFI state wi...

CVE-2023-28028

Dell BIOS contains an improper input validation vulnerability (CVE-2023-28028). A local authenticated attacker with administrator privileges can potentially exploit this to modify a UEFI variable. Connected sources indicate affected firmware and that Dell issued a security update (DSA-2023-099) a...

CVE-2023-28026

CVE-2023-28026 affects Dell BIOS and stems from improper input validation. A local authenticated attacker with administrator privileges could potentially modify a UEFI variable via this vulnerability. Documents indicate Dell released a BIOS security update addressing multiple improper input valid...

CVE-2023-28042

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated administrator to modify a UEFI variable. Affected component is Dell BIOS firmware; root cause is input validation failure. Impact is potential compromise of UEFI variable integrity with high confi...

CVE-2023-28059

Dell BIOS contains an improper input validation vulnerability that can allow a local authenticated administrator to modify a UEFI variable. Affected component: Dell BIOS (embedded BIOS on Dell motherboards). Root cause: improper input validation. Impact: potential unauthorized modification of UEF...

CVE-2023-28029

CVE-2023-28029 is tied to Dell BIOS and is described as an improper input-validation vulnerability that permits a local authenticated attacker with administrator privileges to modify a UEFI variable. The affected component is Dell BIOS firmware on Dell systems; root cause centers on input validat...

CVE-2023-28044

Dell BIOS has an improper input-validation vulnerability. A local authenticated attacker with administrator privileges can potentially modify a UEFI variable due to the fault in input validation. Affected component is Dell BIOS firmware on Dell systems; the root cause is input validation failure....

CVE-2023-28052

CVE-2023-28052 describes an improper input validation vulnerability in Dell BIOS. A local authenticated attacker with administrator privileges can potentially modify a UEFI variable, impacting system integrity and availability. The affected component is Dell BIOS (UEFI/firmware) with root cause s...

CVE-2023-28035

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated administrator to modify a UEFI variable. Affected: Dell BIOS. Root cause: improper input validation. Impact: potential confidentiality, integrity, and limited availability effects per CVSS; local,...

CVE-2023-25936

Dell BIOS contains an improper input validation vulnerability. A local authenticated user with administrator privileges may exploit this to modify a UEFI variable. Affected component: Dell BIOS; impact includes potential integrity/availability impact through UEFI variable modification. Root cause...

CVE-2023-28061

Dell BIOS is affected by an improper input validation vulnerability that allows a local authenticated administrator to modify a UEFI variable. Affected component: Dell BIOS (BIOS firmware on Dell systems). Root cause: improper input validation enabling unauthorized modification of UEFI variables....

CVE-2023-28041

CVE-2023-28041 concerns Dell BIOS, where an improper input validation weakness could be abused by a local authenticated administrator to modify a UEFI variable. The vulnerability affects the BIOS and could impact confidentiality, integrity, and availability. Exploitation status is not detailed in...

CVE-2023-28056

Dell BIOS exposes an improper input validation vulnerability that can be exploited by a local authenticated administrator to modify a UEFI variable. The issue is documented across multiple sources (e.g., Dell security advisory for BIOS updates addressing improper input validation). Affected compo...

CVE-2023-28030

Dell BIOS (on affected systems) contains an improper input validation vulnerability that can be exploited by a local authenticated attacker with administrator privileges to modify a UEFI variable. The issue is driven by input validation problems in the BIOS code. Impact is described as high for i...

CVE-2023-28054

CVE-2023-28054 describes an improper input validation vulnerability in Dell BIOS. A local authenticated attacker with administrator privileges can potentially exploit this to modify a UEFI variable. The affected component is Dell BIOS firmware; root cause is input validation failure. Impact, as s...

CVE-2023-28032

CVE-2023-28032 concerns Dell BIOS with an improper input validation vulnerability. The issue allows a local, authenticated attacker with administrator privileges to potentially modify a UEFI variable by abusing input handling in the BIOS firmware. Affected component is Dell BIOS; the root cause i...

CVE-2023-28040

CVE-2023-28040 affects Dell BIOS and describes an improper input validation vulnerability in the BIOS firmware that could allow a local authenticated attacker with administrator privileges to modify a UEFI variable. The root cause is input validation failure when handling UEFI variable actions. I...