2024-12-12 19:03:50 +00:00
{
"id" : "CVE-2024-47238" ,
"sourceIdentifier" : "security_alert@emc.com" ,
"published" : "2024-12-12T18:15:25.250" ,
2025-02-04 17:03:59 +00:00
"lastModified" : "2025-02-04T15:52:06.230" ,
"vulnStatus" : "Analyzed" ,
2024-12-12 19:03:50 +00:00
"cveTags" : [ ] ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution."
2024-12-15 03:03:56 +00:00
} ,
{
"lang" : "es" ,
"value" : "Dell Client Platform BIOS contiene una vulnerabilidad de validaci\u00f3n de entrada incorrecta en un componente desarrollado externamente. Un atacante con privilegios elevados y acceso local podr\u00eda aprovechar esta vulnerabilidad, lo que provocar\u00eda la ejecuci\u00f3n de c\u00f3digo arbitrario."
2024-12-12 19:03:50 +00:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "security_alert@emc.com" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "HIGH" ,
"privilegesRequired" : "HIGH" ,
"userInteraction" : "NONE" ,
"scope" : "CHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH"
} ,
"exploitabilityScore" : 0.8 ,
"impactScore" : 6.0
2025-02-04 17:03:59 +00:00
} ,
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" ,
"baseScore" : 6.7 ,
"baseSeverity" : "MEDIUM" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "HIGH" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH"
} ,
"exploitabilityScore" : 0.8 ,
"impactScore" : 5.9
2024-12-12 19:03:50 +00:00
}
]
} ,
"weaknesses" : [
{
"source" : "security_alert@emc.com" ,
2025-02-04 17:03:59 +00:00
"type" : "Secondary" ,
2024-12-12 19:03:50 +00:00
"description" : [
{
"lang" : "en" ,
"value" : "CWE-20"
}
]
2025-02-04 17:03:59 +00:00
} ,
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-noinfo"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dell:embedded_box_pc_3000_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.25.0" ,
"matchCriteriaId" : "C6983E4A-CB0A-4ECA-98F6-087422CD7248"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:dell:embedded_box_pc_3000:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F3A103FC-917C-4C48-A7C5-1DFBD03D81F2"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dell:edge_gateway_3001_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.19.0" ,
"matchCriteriaId" : "999C5867-3C72-4168-9253-3DDC5A0F7B16"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:dell:edge_gateway_3001:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E8909DDF-1E31-43BA-B1F4-D6AD6C63DB00"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dell:edge_gateway_3002_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.19.0" ,
"matchCriteriaId" : "8AC17F4E-BED3-4115-AC3A-11CBA2AA339B"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:dell:edge_gateway_3002:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F8AEDC56-9329-4FC3-A660-4255A2CDA2DC"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dell:edge_gateway_3003_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.19.0" ,
"matchCriteriaId" : "8A403B04-6CA6-44F7-BC8A-4450265CC0AC"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:dell:edge_gateway_3003:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3165EDB1-D427-420E-B9B6-615A58387DD9"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dell:edge_gateway_5000_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.29.0" ,
"matchCriteriaId" : "0C9D9627-D510-41A3-A217-921FE7166550"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:dell:edge_gateway_5000:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7B42C9EA-86DD-4643-8F5D-FCE91AEF9253"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dell:edge_gateway_5100_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.29.0" ,
"matchCriteriaId" : "EBCB21BB-84A9-4BD3-8E01-965B8DF9A344"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:dell:edge_gateway_5100:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FB5D8F56-FBBB-4B2D-9720-5A806490F533"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dell:edge_gateway_3000_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.19.0" ,
"matchCriteriaId" : "D90C7E5D-3B90-45AE-809C-0926A74F50AC"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:dell:edge_gateway_3000:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EB4FB13B-F6D1-428E-A0D5-2483EBD1DD1A"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dell:edge_gateway_3200_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.19.0" ,
"matchCriteriaId" : "EC04DD0A-9CD2-4459-8C60-97573BC16A05"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:dell:edge_gateway_3200:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FBA59414-5A32-4706-85A5-D5459EE22BA5"
}
]
}
]
2024-12-12 19:03:50 +00:00
}
] ,
"references" : [
{
"url" : "https://www.dell.com/support/kbdoc/en-us/000227595/dsa-2024-355" ,
2025-02-04 17:03:59 +00:00
"source" : "security_alert@emc.com" ,
"tags" : [
"Vendor Advisory"
]
2024-12-12 19:03:50 +00:00
}
]
}