What’s Vulnerable › Vulnerabilities

CVE-2024-22429

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-17 · updated 2026-06-17
• Weakness: CWE-20

Description

Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.

Affected products

• Dell Edge Gateway 3000 Firmware: before 1.18.0 — fixed in 1.18.0
• Dell Edge Gateway 5000 Firmware: before 1.28.0 — fixed in 1.28.0
• Dell Embedded Box PC 3000 , CPG BIOS: before 1.24.0 — fixed in 1.24.0
• Dell Embedded Box Pc 5000 Firmware: before 1.25.0 — fixed in 1.25.0
• Dell Latitude 12 Rugged Extreme 7214 Firmware: before 1.46.0 — fixed in 1.46.0
• Dell Latitude 13 3380 Firmware: before 1.27.0 — fixed in 1.27.0
• Dell Latitude 3180 Firmware: before 1.29.0 — fixed in 1.29.0
• Dell Latitude 3189 Firmware: before 1.29.0 — fixed in 1.29.0
• Dell Latitude 3190 2-In-1 Firmware: before 1.34.0 — fixed in 1.34.0
• Dell Latitude 3190 Firmware: before 1.34.0 — fixed in 1.34.0
• Dell Latitude 3300 Firmware: before 1.28.0 — fixed in 1.28.0
• Dell Latitude 3390 2-In-1 Firmware: before 1.31.0 — fixed in 1.31.0
• Dell Latitude 5280 Firmware: before 1.36.0 — fixed in 1.36.0
• Dell Latitude 5288 Firmware: before 1.36.0 — fixed in 1.36.0
• Dell Latitude 5290 2-In-1 Firmware: before 1.34.0 — fixed in 1.34.0
• Dell Latitude 5290 Firmware: before 1.35.0 — fixed in 1.35.0
• Dell Latitude 5400 Firmware: before 1.30.0 — fixed in 1.30.0
• Dell Latitude 5414 Rugged Firmware: before 1.46.0 — fixed in 1.46.0
• Dell Latitude 5420 Rugged Firmware: before 1.32.0 — fixed in 1.32.0
• Dell Latitude 5424 Rugged Firmware: before 1.32.0 — fixed in 1.32.0
• Dell Latitude 5480 Firmware: before 1.36.0 — fixed in 1.36.0
• Dell Latitude 5488 Firmware: before 1.36.0 — fixed in 1.36.0
• Dell Latitude 5490 Firmware: before 1.35.0 — fixed in 1.35.0
• Dell Latitude 5580 Firmware: before 1.36.0 — fixed in 1.36.0
• Dell Latitude 5590 Firmware: before 1.35.0 — fixed in 1.35.0
• Dell Latitude 7212 Rugged Extreme Tablet Firmware: before 1.50.0 — fixed in 1.50.0
• Dell Latitude 7280 Firmware: before 1.37.0 — fixed in 1.37.0
• Dell Latitude 7285 2-In-1 Firmware: before 1.26.0 — fixed in 1.26.0
• Dell Latitude 7290 Firmware: before 1.38.0 — fixed in 1.38.0
• Dell Latitude 7380 Firmware: before 1.37.0 — fixed in 1.37.0

How to fix

Upgrade to a fixed version: Dell Edge Gateway 3000 Firmware 1.18.0; Dell Edge Gateway 5000 Firmware 1.28.0; Dell Embedded Box PC 3000 , CPG BIOS 1.24.0; Dell Embedded Box Pc 5000 Firmware 1.25.0; Dell Latitude 12 Rugged Extreme 7214 Firmware 1.46.0; Dell Latitude 13 3380 Firmware 1.27.0; Dell Latitude 3180 Firmware 1.29.0; Dell Latitude 3189 Firmware 1.29.0; Dell Latitude 3190 2-In-1 Firmware 1.34.0; Dell Latitude 3190 Firmware 1.34.0; Dell Latitude 3300 Firmware 1.28.0; Dell Latitude 3390 2-In-1 Firmware 1.31.0. Check the vendor advisory for mitigations.

References

• https://www.dell.com/support/kbdoc/en-us/000221102/dsa-2024-020
• https://www.dell.com/support/kbdoc/en-us/000221102/dsa-2024-020

Get alerted when CVE-2024-22429 or the next vulnerability affects your stack