Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially…

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges

Scores

EPSS (exploitation in 30 days)

0.15% · top 96% of all CVEs (6 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.1.

Weakness

• CWE-20: Improper Input Validation (opens in a new tab)All about CWE-20 and its CVEs

Affected products

• Dell · CPG BIOS

  • affected N/A – < 1.28.0
  • affected N/A – < 1.23.0
  • affected N/A – < 1.15.0
  • affected N/A – < 1.2.1
  • affected N/A – < 1.12.1
  • affected N/A – < 1.2.0
  • affected N/A – < 1.20.0
  • affected N/A – < 1.12.0
  • affected N/A – < 1.26.0
  • affected N/A – < 1.27.0
  • affected N/A – < 1.13.0
  • affected N/A – < 1.29.0
  • affected N/A – < 1.19.0
  • affected N/A – < 1.25.0
  • affected N/A – < 1.31.0
  • affected N/A – < 2.27.0
  • affected N/A – < 2.35.0
  • affected N/A – < 2.39.0
  • affected N/A – < 1.17.0
  • affected N/A – < 1.24.0
  • affected N/A – < 2.26.0
  • affected N/A – < 1.13.1
  • affected N/A – < 2.25.0
  • affected N/A – < 1.3.1
  • affected N/A – < 1.18.0
  • affected N/A – < 1.21.0
  • affected N/A – < 1.22.0
  • affected N/A – < 1.9.0
  • affected N/A – < 1.3.0
  • affected N/A – < 1.30.0
  • affected N/A – < 1.32.0
  • affected N/A – < 1.29..0
  • affected N/A – < 1.45.0
  • affected N/A – < 1.33.0
  • affected N/A – < 1.11.0
  • affected N/A – < 1.35.0
  • affected N/A – < 1.34.0
  • affected N/A – < 1.36.0
  • affected N/A – < 1.36.2
  • affected N/A – < 1.25.1
  • and 28 more

References (1)

• https://www.dell.com/support/kbdoc/en-in/000220141/dsa-2024-030-security-update-for-dell-client-bios-for-an-improper-input-validation-vulnerability (opens in a new tab)vendor-advisoryx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2024-0158](https://trackcve.app/badge/CVE-2024-0158.svg)](https://trackcve.app/cve/CVE-2024-0158)

Record last updated 1 Aug 2024, 17:41 UTC.