What’s Vulnerable › Vulnerabilities

CVE-2024-0158

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-02 · updated 2026-06-17
• Weakness: CWE-20

Description

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges

Affected products

• Dell Alienware M15 R6 Firmware: before 1.28.0 — fixed in 1.28.0
• Dell Alienware M15 R7 Firmware: before 1.28.0 — fixed in 1.28.0
• Dell Alienware M16 R1 Firmware: before 1.15.0 — fixed in 1.15.0
• Dell Alienware M18 R1 Firmware: before 1.15.0 — fixed in 1.15.0
• Dell Alienware M18 R2 Firmware: before 1.2.1 — fixed in 1.2.1
• Dell Alienware X14 R2 Firmware: before 1.12.1 — fixed in 1.12.1
• Dell Alienware X16 R1 Firmware: before 1.12.1 — fixed in 1.12.1
• Dell Alienware X16 R2 Firmware: before 1.2.0 — fixed in 1.2.0
• Dell Chengming 3900 Firmware: before 1.20.0 — fixed in 1.20.0
• Dell Chengming 3910 Firmware: before 1.12.0 — fixed in 1.12.0
• Dell Chengming 3911 Firmware: before 1.12.0 — fixed in 1.12.0
• Dell Chengming 3990 Firmware: before 1.26.0 — fixed in 1.26.0
• Dell Chengming 3991 Firmware: before 1.26.0 — fixed in 1.26.0
• Dell Edge Gateway 3000 Firmware: before 1.17.0 — fixed in 1.17.0
• Dell Edge Gateway 5000 Firmware: before 1.27.0 — fixed in 1.27.0
• Dell Embedded Box PC 3000 , CPG BIOS: before 1.23.0 — fixed in 1.23.0
• Dell Embedded Box Pc 5000 Firmware: before 1.24.0 — fixed in 1.24.0
• Dell G15 5510 Firmware: before 1.23.0 — fixed in 1.23.0
• Dell G15 5511 Firmware: before 1.27.0 — fixed in 1.27.0
• Dell G15 5520 Firmware: before 1.23.0 — fixed in 1.23.0
• Dell G15 5530 Firmware: before 1.13.0 — fixed in 1.13.0
• Dell G16 7620 Firmware: before 1.23.0 — fixed in 1.23.0
• Dell G16 7630 Firmware: before 1.13.0 — fixed in 1.13.0
• Dell G3 3500 Firmware: before 1.29.0 — fixed in 1.29.0
• Dell G5 5000 Firmware: before 1.19.0 — fixed in 1.19.0
• Dell G5 5090 Firmware: before 1.25.0 — fixed in 1.25.0
• Dell G5 5500 Firmware: before 1.29.0 — fixed in 1.29.0
• Dell G7 7500 Firmware: before 1.31.0 — fixed in 1.31.0
• Dell G7 7700 Firmware: before 1.31.0 — fixed in 1.31.0
• Dell Inspiron 13 5310 Firmware: before 2.26.0 — fixed in 2.26.0

How to fix

Upgrade to a fixed version: Dell Alienware M15 R6 Firmware 1.28.0; Dell Alienware M15 R7 Firmware 1.28.0; Dell Alienware M16 R1 Firmware 1.15.0; Dell Alienware M18 R1 Firmware 1.15.0; Dell Alienware M18 R2 Firmware 1.2.1; Dell Alienware X14 R2 Firmware 1.12.1; Dell Alienware X16 R1 Firmware 1.12.1; Dell Alienware X16 R2 Firmware 1.2.0; Dell Chengming 3900 Firmware 1.20.0; Dell Chengming 3910 Firmware 1.12.0; Dell Chengming 3911 Firmware 1.12.0; Dell Chengming 3990 Firmware 1.26.0. Check the vendor advisory for mitigations.

References

• https://www.dell.com/support/kbdoc/en-in/000220141/dsa-2024-030-security-update-for-dell-client-bios-for-an-improper-input-validation-vulnerability
• https://www.dell.com/support/kbdoc/en-in/000220141/dsa-2024-030-security-update-for-dell-client-bios-for-an-improper-input-validation-vulnerability

Get alerted when CVE-2024-0158 or the next vulnerability affects your stack