What’s Vulnerable › Vulnerabilities

CVE-2024-47238

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-12 · updated 2026-06-17
• Weakness: CWE-20

Description

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.

Affected products

• Dell Edge Gateway 3000 Firmware: before 1.19.0 — fixed in 1.19.0
• Dell Edge Gateway 3001 Firmware: before 1.19.0 — fixed in 1.19.0
• Dell Edge Gateway 3002 Firmware: before 1.19.0 — fixed in 1.19.0
• Dell Edge Gateway 3003 Firmware: before 1.19.0 — fixed in 1.19.0
• Dell Edge Gateway 3200: before 1.19.0 — fixed in 1.19.0
• Dell Edge Gateway 5000 Firmware: before 1.29.0 — fixed in 1.29.0
• Dell Edge Gateway 5100 Firmware: before 1.29.0 — fixed in 1.29.0
• Dell Embedded Box PC 3000 , CPG BIOS: before 1.25.0 — fixed in 1.25.0

How to fix

Upgrade to a fixed version: Dell Edge Gateway 3000 Firmware 1.19.0; Dell Edge Gateway 3001 Firmware 1.19.0; Dell Edge Gateway 3002 Firmware 1.19.0; Dell Edge Gateway 3003 Firmware 1.19.0; Dell Edge Gateway 3200 1.19.0; Dell Edge Gateway 5000 Firmware 1.29.0; Dell Edge Gateway 5100 Firmware 1.29.0; Dell Embedded Box PC 3000 , CPG BIOS 1.25.0. Check the vendor advisory for mitigations.

References

• https://www.dell.com/support/kbdoc/en-us/000227595/dsa-2024-355

Get alerted when CVE-2024-47238 or the next vulnerability affects your stack