DeutschShown in its original language — a full translation is planned for a future version.
Dell BIOS und Computer: Mehrere Schwachstellen ermöglichen Codeausführung und Privilegienerweiterung
view advisory published 2024-08-13
Ein lokaler Angreifer kann mehrere Schwachstellen in Dell BIOS und Dell Computer ausnutzen, um beliebigen Programmcode auszuführen und erweiterte Rechte zu erlangen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-25561US | high7.8 | — | ||
Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of priv… | ||||
| CVE-2024-23974US | —OT elevated | — | ||
Incorrect default permissions in some Intel(R) ISH software installers may allow an authenticated user to potentially enable escalation of privilege via local access. | ||||
| CVE-2024-23489US | high7.3 | — | ||
Uncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an authenticated user to potentially enable escalation of privilege via local access. | ||||
| CVE-2024-38483US | medium6.7 | — | ||
Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vuln… | ||||
| CVE-2023-39230US | high7.8 | — | ||
Insecure inherited permissions in some Intel Rapid Storage Technology software before version 16.8.5.1014.9 may allow an authenticated user to potentially enable escalation of priv… | ||||
| CVE-2022-43456US | high7.8 | — | ||
Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may allow an authenticated user to potentially… | ||||
02
references
External citations — patches, advisories, analysis.
- Lenovo Security Advisory LEN-158299 vom 2024-08-15external
- WID-SEC-W-2024-1836 - CSAF Versionself
- WID-SEC-2024-1836 - Portal Versionself
- Dell Security Update vom 2024-08-13external
- Dell Security Update vom 2024-08-13external
- Dell Security Update vom 2024-08-13external
- Dell Security Update vom 2024-08-13external
- Dell Security Update vom 2024-08-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan