CVE-2024-38296

Severity: medium (CVSS 4.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-11-22 · updated 2026-06-17
Weakness: CWE-1421

Description

Dell Edge Gateway 3200, versions prior to 15.40.30.2879, and Edge Gateway 5200, versions prior to 12.0.94.2380, contain an Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

Affected products

Dell Intel Management Engine Firmware Update Utility: before 15.40.30.2879; before 12.0.94.2380 — fixed in 12.0.94.2380, 15.40.30.2879

How to fix

Upgrade to a fixed version: Dell Intel Management Engine Firmware Update Utility 12.0.94.2380, 15.40.30.2879. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/kbdoc/en-us/000250949/dsa-2024-345-security-update-for-dell-networking-edge-gateway-5200-vulnerability

Get alerted when CVE-2024-38296 or the next vulnerability affects your stack