LOW · 3.8

CVE-2024-32855

Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability,...

Vulnerability Description

Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

CVSS Score

3.8

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
DellInspiron 3480 Firmware< 1.30.0
DellInspiron 3480-
DellInspiron 3580 Firmware< 1.30.0
DellInspiron 3580-
DellLatitude 3120 Firmware< 1.26.0
DellLatitude 3120-
DellLatitude 3190 Firmware< 1.34.0
DellLatitude 3190-
DellLatitude 3190 2-In-1 Firmware< 1.34.0
DellLatitude 3190 2-In-1-
DellLatitude 3300 Firmware< 1.28.0
DellLatitude 3300-
DellLatitude 3310 Firmware< 1.25.0
DellLatitude 3310-
DellLatitude 3310 2-In-1 Firmware< 1.24.0
DellLatitude 3310 2-In-1-
DellLatitude 3390 2-In-1 Firmware< 1.31.0
DellLatitude 3390 2-In-1-
DellLatitude 5288 Firmware< 1.36.0
DellLatitude 5288-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2024-32855?

CVE-2024-32855 is a vulnerability with a CVSS score of 3.8 (LOW). Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability,...

How severe is CVE-2024-32855?

CVE-2024-32855 has been rated LOW with a CVSS base score of 3.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-32855?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Inspiron 3480 Firmware, Dell Inspiron 3480, Dell Inspiron 3580 Firmware, Dell Inspiron 3580, Dell Latitude 3120 Firmware.