CVE-2024-39584

Severity: high (CVSS 8.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-08-28 · updated 2026-06-17
Weakness: CWE-1392

Description

Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.

Affected products

Dell Alienware Area 51M R2 Firmware: before 1.29.0 — fixed in 1.29.0
Dell Alienware Aurora R13 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Alienware Aurora R15 Amd Firmware: before 1.15.0 — fixed in 1.15.0
Dell Alienware Aurora R15 Firmware: before 1.17.0 — fixed in 1.17.0
Dell Alienware Aurora Ryzen Edition R14 Firmware: before 2.19.1 — fixed in 2.19.1
Dell Alienware M15 R3 Firmware: before 1.29.0 — fixed in 1.29.0
Dell Alienware M15 R4 Firmware: before 1.24.0 — fixed in 1.24.0
Dell Alienware M17 R3 Firmware: before 1.29.0 — fixed in 1.29.0
Dell Alienware M17 R4 Firmware: before 1.24.0 — fixed in 1.24.0
Dell Alienware X14 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Alienware X15 R1 Firmware: before 1.24.0 — fixed in 1.24.0
Dell Alienware X15 R2 Firmware: before 1.22.0 — fixed in 1.22.0
Dell Alienware X17 R1 Firmware: before 1.24.0 — fixed in 1.24.0
Dell Alienware X17 R2 Firmware: before 1.22.0 — fixed in 1.22.0
Dell Aurora R16 Firmware: before 2.13.0 — fixed in 2.13.0
Dell Inspiron 15 3510 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Inspiron 15 3521 Firmware: before 1.16.0 — fixed in 1.16.0
Dell Inspiron 3502 Firmware: before 1.18.0 — fixed in 1.18.0
Dell Xps 8950 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Xps 8960 Firmware: before 2.12.0 — fixed in 2.12.0

How to fix

Upgrade to a fixed version: Dell Alienware Area 51M R2 Firmware 1.29.0; Dell Alienware Aurora R13 Firmware 1.21.0; Dell Alienware Aurora R15 Amd Firmware 1.15.0; Dell Alienware Aurora R15 Firmware 1.17.0; Dell Alienware Aurora Ryzen Edition R14 Firmware 2.19.1; Dell Alienware M15 R3 Firmware 1.29.0; Dell Alienware M15 R4 Firmware 1.24.0; Dell Alienware M17 R3 Firmware 1.29.0; Dell Alienware M17 R4 Firmware 1.24.0; Dell Alienware X14 Firmware 1.21.0; Dell Alienware X15 R1 Firmware 1.24.0; Dell Alienware X15 R2 Firmware 1.22.0. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/kbdoc/en-us/000227594/dsa-2024-354

Get alerted when CVE-2024-39584 or the next vulnerability affects your stack