CVE Feed

    Dashboard / CVE / CVE-2024-28970

    CVE-2024-28970

    Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of service.

    Published:Jun 12, 2024
    Last Modified:Nov 21, 2024
    EPS:Jun 12, 2024
    EPSS Score:0.00044
    CVSS Score:4.7

    Affected Products

    Vendor
    Dell
    Product
    G7 7500
    Vendor
    Dell
    Product
    G7 7500 Firmware
    Vendor
    Dell
    Product
    G7 7700
    Vendor
    Dell
    Product
    G7 7700 Firmware
    Vendor
    Dell
    Product
    Inspiron 14 Plus 7440
    Vendor
    Dell
    Product
    Inspiron 14 Plus 7440 Firmware
    Vendor
    Dell
    Product
    Inspiron 16 7640 2-in-1
    Vendor
    Dell
    Product
    Inspiron 16 7640 2-in-1 Firmware
    Vendor
    Dell
    Product
    Inspiron 16 Plus 7640
    Vendor
    Dell
    Product
    Inspiron 16 Plus 7640 Firmware
    Vendor
    Dell
    Product
    Inspiron 24 5420 All-in-one
    Vendor
    Dell
    Product
    Inspiron 24 5420 All-in-one Firmware
    Vendor
    Dell
    Product
    Inspiron 27 7720 All-in-one
    Vendor
    Dell
    Product
    Inspiron 27 7720 All-in-one Firmware
    Vendor
    Dell
    Product
    Inspiron 5402
    Vendor
    Dell
    Product
    Inspiron 5402 Firmware
    Vendor
    Dell
    Product
    Inspiron 5409
    Vendor
    Dell
    Product
    Inspiron 5409 Firmware
    Vendor
    Dell
    Product
    Inspiron 5502
    Vendor
    Dell
    Product
    Inspiron 5502 Firmware
    Vendor
    Dell
    Product
    Inspiron 5509
    Vendor
    Dell
    Product
    Inspiron 5509 Firmware
    Vendor
    Dell
    Product
    Precision 3660
    Vendor
    Dell
    Product
    Precision 3660 Firmware
    Vendor
    Dell
    Product
    Vostro 5402
    Vendor
    Dell
    Product
    Vostro 5402 Firmware
    Vendor
    Dell
    Product
    Vostro 5502
    Vendor
    Dell
    Product
    Vostro 5502 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-43078 (CVSS 6.7) — Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installat…
    CVE-2024-0158 (CVSS 5.1) — Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin…
    CVE-2024-0160 (CVSS 6.8) — Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to th…
    CVE-2024-22448 (CVSS 4.7) — Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privi…
    CVE-2022-34405 (CVSS 7.3) — An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated mal…
    CVE-2022-26861 (CVSS 7.9) — Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious u…
    CVE-2022-26860 (CVSS 7.5) — Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vu…
    CVE-2022-26859 (CVSS 6.1) — Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sendin…
    CVE-2022-26858 (CVSS 6.1) — Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user co…
    CVE-2022-22567 (CVSS 4.7) — Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data au…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High