VulnerabilityAnalyzed
CVE-2024-52541
Dell Client Platform BIOS contains a Weak Authentication vulnerability.
HIGH 8.2EPSS 0.16%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.16%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
- CVSS 3.1
- 8.2 HIGHCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- EPSS
- 0.16% probability · 6th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-1390
- Affected
- dell/alienware m15 r6 firmware · dell/alienware m15 r7 firmware · dell/alienware m16 r1 firmware · dell/alienware m16 r2 firmware · dell/alienware m18 r1 firmware · dell/latitude 5300 2-in-1 firmware · dell/latitude 5310 firmware · dell/latitude 5310 2-in-1 firmware · dell/latitude 5320 firmware · dell/latitude 5330 firmware · dell/latitude 5340 firmware · dell/latitude 5350 firmware · dell/latitude 5400 firmware · dell/latitude 5401 firmware · dell/latitude 5410 firmware · dell/latitude 5411 firmware · dell/latitude 5420 firmware · dell/latitude 5420 rugged firmware · dell/latitude 5421 firmware · dell/latitude 5424 rugged firmware · +40 more
- Source
- security_alert@emc.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.