CVE-2024-39584

moderate-risk

Published 2024-08-28

Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.

Do I need to act?

0.01% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.2/10 High

LOCAL / LOW complexity

Affected Products (20)

Xps 8960 Firmware

Xps 8950 Firmware

Inspiron 3502 Firmware

Inspiron 15 3521 Firmware

Inspiron 15 3510 Firmware

Aurora R16 Firmware

Alienware X17 R2 Firmware

Alienware X17 R1 Firmware

Alienware X15 R2 Firmware

Alienware X15 R1 Firmware

Alienware X14 Firmware

Alienware M17 R4 Firmware

Alienware M17 R3 Firmware

Alienware M15 R4 Firmware

Alienware M15 R3 Firmware

Alienware Aurora Ryzen Edition R14 Firmware

Alienware Aurora R15 Amd Firmware

Alienware Aurora R15 Firmware

Alienware Aurora R13 Firmware

Alienware Area 51M R2 Firmware

Affected Vendors

Dell

References (1)

Vendor Advisory https://www.dell.com/support/kbdoc/en-us/000227594/dsa-2024-354

/ 100

moderate-risk

Severity 25/34 · High

Exploitability 0/34 · Minimal

Exposure 20/34 · Moderate