CVE-2024-38483

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-08-14 · updated 2026-06-17
Weakness: CWE-20

Description

Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

Affected products

Dell Embedded Box Pc 5000 Firmware: before 1.26.0 — fixed in 1.26.0
Dell Latitude 12 Rugged Extreme 7214 Firmware: before 1.47.0 — fixed in 1.47.0
Dell Latitude 13 3380 Firmware: before 1.28.0 — fixed in 1.28.0
Dell Latitude 3300 Firmware: before 1.29.0 — fixed in 1.29.0
Dell Latitude 3390 2-In-1 Firmware: before 1.32.0 — fixed in 1.32.0
Dell Latitude 5280 Firmware: before 1.37.0 — fixed in 1.37.0
Dell Latitude 5288 Firmware: before 1.37.0 — fixed in 1.37.0
Dell Latitude 5290 2-In-1 Firmware: before 1.35.0 — fixed in 1.35.0
Dell Latitude 5290 Firmware: before 1.36.0 — fixed in 1.36.0
Dell Latitude 5400 Firmware: before 1.32.0 — fixed in 1.32.0
Dell Latitude 5414 Rugged Firmware: before 1.47.0 — fixed in 1.47.0
Dell Latitude 5420 Rugged Firmware: before 1.34.0 — fixed in 1.34.0
Dell Latitude 5424 Rugged Firmware: before 1.34.0 — fixed in 1.34.0
Dell Latitude 5480 Firmware: before 1.37.0 — fixed in 1.37.0
Dell Latitude 5488 Firmware: before 1.37.0 — fixed in 1.37.0
Dell Latitude 5490 Firmware: before 1.36.0 — fixed in 1.36.0
Dell Latitude 5580 Firmware: before 1.37.0 — fixed in 1.37.0
Dell Latitude 5590 Firmware: before 1.36.0 — fixed in 1.36.0
Dell Latitude 7212 Rugged Extreme Tablet Firmware: before 1.51.0 — fixed in 1.51.0
Dell Latitude 7280 Firmware: before 1.38.0 — fixed in 1.38.0
Dell Latitude 7285 2-In-1 Firmware: before 1.27.0 — fixed in 1.27.0
Dell Latitude 7290 Firmware: before 1.39.0 — fixed in 1.39.0
Dell Latitude 7380 Firmware: before 1.38.0 — fixed in 1.38.0
Dell Latitude 7390 2-In-1 Firmware: before 1.36.0 — fixed in 1.36.0
Dell Latitude 7390 Firmware: before 1.39.0 — fixed in 1.39.0
Dell Latitude 7414 Rugged Firmware: before 1.47.0 — fixed in 1.47.0
Dell Latitude 7424 Rugged Extreme Firmware: before 1.34.0 — fixed in 1.34.0
Dell Latitude 7480 Firmware: before 1.38.0 — fixed in 1.38.0
Dell Latitude 7490 Firmware: before 1.39.0 — fixed in 1.39.0
Dell Optiplex 3050 All-In-One Firmware: before 1.34.0 — fixed in 1.34.0

How to fix

Upgrade to a fixed version: Dell Embedded Box Pc 5000 Firmware 1.26.0; Dell Latitude 12 Rugged Extreme 7214 Firmware 1.47.0; Dell Latitude 13 3380 Firmware 1.28.0; Dell Latitude 3300 Firmware 1.29.0; Dell Latitude 3390 2-In-1 Firmware 1.32.0; Dell Latitude 5280 Firmware 1.37.0; Dell Latitude 5288 Firmware 1.37.0; Dell Latitude 5290 2-In-1 Firmware 1.35.0; Dell Latitude 5290 Firmware 1.36.0; Dell Latitude 5400 Firmware 1.32.0; Dell Latitude 5414 Rugged Firmware 1.47.0; Dell Latitude 5420 Rugged Firmware 1.34.0. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/kbdoc/en-us/000225776/dsa-2024-260

Get alerted when CVE-2024-38483 or the next vulnerability affects your stack