CVE-2024-52541

Severity: high (CVSS 8.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-19 · updated 2026-06-17
Weakness: CWE-1390

Description

Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Affected products

Dell Alienware M15 R6 Firmware: before 1.34.0 — fixed in 1.34.0
Dell Alienware M15 R7 Firmware: before 1.28.0 — fixed in 1.28.0
Dell Alienware M16 R1 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Alienware M16 R2 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Alienware M18 R1 Firmware: before 1.21.0 — fixed in 1.21.0
Dell Alienware M18 R2 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Alienware X14 R2 Firmware: before 1.17.0 — fixed in 1.17.0
Dell Alienware X16 R1 Firmware: before 1.17.0 — fixed in 1.17.0
Dell Alienware X16 R2 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Chengming 3900 Firmware: before 1.26.0 — fixed in 1.26.0
Dell Chengming 3910 Firmware: before 1.20.0 — fixed in 1.20.0
Dell Chengming 3911 Firmware: before 1.20.0 — fixed in 1.20.0
Dell Chengming 3990 Firmware: before 1.31.1 — fixed in 1.31.1
Dell Chengming 3991 Firmware: before 1.31.1 — fixed in 1.31.1
Dell Edge Gateway 3001 Firmware: before 1.20.0 — fixed in 1.20.0
Dell Edge Gateway 3002 Firmware: before 1.20.0 — fixed in 1.20.0
Dell Edge Gateway 3003 Firmware: before 1.20.0 — fixed in 1.20.0
Dell Edge Gateway 5000 Firmware: before 1.30.0 — fixed in 1.30.0
Dell Embedded Box PC 3000 , CPG BIOS: before 1.26.0 — fixed in 1.26.0
Dell Embedded Box Pc 5000 Firmware: before 1.27.0 — fixed in 1.27.0
Dell G15 5510 Firmware: before 1.29.0 — fixed in 1.29.0
Dell G15 5511 Firmware: before 1.32.0 — fixed in 1.32.0
Dell G15 5520 Firmware: before 1.28.0 — fixed in 1.28.0
Dell G15 5530 Firmware: before 1.21.1 — fixed in 1.21.1
Dell G16 7620 Firmware: before 1.28.0 — fixed in 1.28.0
Dell G16 7630 Firmware: before 1.21.1 — fixed in 1.21.1
Dell G5 5000 Firmware: before 1.25.1 — fixed in 1.25.1
Dell Inspiron 13 5310 Firmware: before 2.31.0 — fixed in 2.31.0
Dell Inspiron 13 5320 Firmware: before 1.22.0 — fixed in 1.22.0
Dell Inspiron 13 5330 Firmware: before 1.18.0 — fixed in 1.18.0

How to fix

Upgrade to a fixed version: Dell Alienware M15 R6 Firmware 1.34.0; Dell Alienware M15 R7 Firmware 1.28.0; Dell Alienware M16 R1 Firmware 1.21.0; Dell Alienware M16 R2 Firmware 1.8.0; Dell Alienware M18 R1 Firmware 1.21.0; Dell Alienware M18 R2 Firmware 1.9.0; Dell Alienware X14 R2 Firmware 1.17.0; Dell Alienware X16 R1 Firmware 1.17.0; Dell Alienware X16 R2 Firmware 1.7.0; Dell Chengming 3900 Firmware 1.26.0; Dell Chengming 3910 Firmware 1.20.0; Dell Chengming 3911 Firmware 1.20.0. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/kbdoc/en-us/000258429/dsa-2025-021

Get alerted when CVE-2024-52541 or the next vulnerability affects your stack