CVE Feed

    Dashboard / CVE / CVE-2024-0160

    CVE-2024-0160

    Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS.

    Published:Jun 12, 2024
    Last Modified:Nov 21, 2024
    EPS:Jun 12, 2024
    EPSS Score:0.00033
    CVSS Score:6.8

    Affected Products

    Vendor
    Dell
    Product
    G3 3500
    Vendor
    Dell
    Product
    G3 3500 Firmware
    Vendor
    Dell
    Product
    G5 5500
    Vendor
    Dell
    Product
    G5 5500 Firmware
    Vendor
    Dell
    Product
    G7 7500
    Vendor
    Dell
    Product
    G7 7500 Firmware
    Vendor
    Dell
    Product
    G7 7700
    Vendor
    Dell
    Product
    G7 7700 Firmware
    Vendor
    Dell
    Product
    Inspiron 7500
    Vendor
    Dell
    Product
    Inspiron 7500 Firmware
    Vendor
    Dell
    Product
    Inspiron 7501
    Vendor
    Dell
    Product
    Inspiron 7501 Firmware
    Vendor
    Dell
    Product
    Latitude 3410
    Vendor
    Dell
    Product
    Latitude 3410 Firmware
    Vendor
    Dell
    Product
    Latitude 3420
    Vendor
    Dell
    Product
    Latitude 3420 Firmware
    Vendor
    Dell
    Product
    Latitude 3510
    Vendor
    Dell
    Product
    Latitude 3510 Firmware
    Vendor
    Dell
    Product
    Latitude 3520
    Vendor
    Dell
    Product
    Latitude 3520 Firmware
    Vendor
    Dell
    Product
    Precision 5550
    Vendor
    Dell
    Product
    Precision 5550 Firmware
    Vendor
    Dell
    Product
    Precision 5750
    Vendor
    Dell
    Product
    Precision 5750 Firmware
    Vendor
    Dell
    Product
    Vostro 7500
    Vendor
    Dell
    Product
    Vostro 7500 Firmware
    Vendor
    Dell
    Product
    Xps 15 9500
    Vendor
    Dell
    Product
    Xps 15 9500 Firmware
    Vendor
    Dell
    Product
    Xps 17 9700
    Vendor
    Dell
    Product
    Xps 17 9700 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-863 Incorrect Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-43078 (CVSS 6.7) — Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installat…
    CVE-2024-0158 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin…
    CVE-2024-22448 (CVSS 4.7) — Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privi…
    CVE-2023-28063 (CVSS 6.7) — Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user …
    CVE-2023-32453 (CVSS 4.6) — Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the sys…
    CVE-2023-28075 (CVSS 6.9) — Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user wit…
    CVE-2023-28058 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…
    CVE-2023-28050 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…
    CVE-2023-28026 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…
    CVE-2023-28044 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High