Vulnerability · Published Jun 25, 2024 · Assigned by dell

CVE-2024-32855

Low 3.8

In plain English

A low-severity out-of-bounds write in CPG BIOS from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).

Severity (CVSS 3.1)3.8Low

Exploit odds (30 days)0.1%top 97.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

Affected products (as reported)

Vendor	Product	Versions
Dell	CPG BIOS	N/A – before 1.30.0N/A – before 1.26.0N/A – before 1.34.0N/A – before 1.28.0N/A – before 1.25.0N/A – before 1.24.0N/A – before 1.31.0N/A – before 1.36.0

Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L

References

https://www.dell.com/support/kbdoc/en-us/000225627/dsa-2024-123 vendor-advisory