CVE-2019-3717

highpriority · track · 27EPSS 0.004 · 30 %ileEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.36% (30th) EPSS

CVSS 7.2 · high

Is it mine?

242 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-28

Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An unauthenticated attacker with physical access to the system could potentially bypass intended Secure Boot restrictions to run unsigned and untrusted code on expansion cards installed in the system during platform boot. Refer to https://www.dell.com/support/article/us/en/04/sln317683/dsa-2019-043-dell-client-improper-access-control-vulnerability?lang=en for versions affected by this vulnerability.

cvss

Technical severity, 0–10. One row per scoring source.

7.2

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.2–7.2

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 3.9 · impact 10

v3.16.8mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 0.9 · impact 5.9

v3.07.1highCVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:Hsecondary · ENISA EU

v3.07.1highCVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:Hsecondary · security_alert@emc.comexploitability 0.5 · impact 6

v3.16.2mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-287USLLM-inferred

affected products (242)

Products and version ranges known to be affected.

Dell Dell Client Commercial and Consumer platforms≤ https://www.dell.com/support/article/us/en/04/sln317683/dsa-2019-043-dell-client-improper-access-control-vulnerability?lang=enenisa_euvdEU
dell chengming 3967 firmware< 1.5.0nvdUScpe:2.3:o:dell:chengming_3967_firmware:*:*:*:*:*:*:*:*
dell chengming 3977 firmware< 1.6.0nvdUScpe:2.3:o:dell:chengming_3977_firmware:*:*:*:*:*:*:*:*
dell chengming 3980 firmware< 1.5.21nvdUScpe:2.3:o:dell:chengming_3980_firmware:*:*:*:*:*:*:*:*
dell embedded box pc 5000 firmware< 1.5.6nvdUScpe:2.3:o:dell:embedded_box_pc_5000_firmware:*:*:*:*:*:*:*:*
dell g3 3579 firmware< 1.9.0nvdUScpe:2.3:o:dell:g3_3579_firmware:*:*:*:*:*:*:*:*
dell g3 3779 firmware< 1.9.0nvdUScpe:2.3:o:dell:g3_3779_firmware:*:*:*:*:*:*:*:*
dell g5 5587 firmware< 1.10.0nvdUScpe:2.3:o:dell:g5_5587_firmware:*:*:*:*:*:*:*:*
dell g5 5590 firmware< 1.3.1nvdUScpe:2.3:o:dell:g5_5590_firmware:*:*:*:*:*:*:*:*
dell g7 7588 firmware< 1.10.0nvdUScpe:2.3:o:dell:g7_7588_firmware:*:*:*:*:*:*:*:*
dell g7 7590 firmware< 1.3.1nvdUScpe:2.3:o:dell:g7_7590_firmware:*:*:*:*:*:*:*:*
dell g7 7790 firmware< 1.3.1nvdUScpe:2.3:o:dell:g7_7790_firmware:*:*:*:*:*:*:*:*
dell inspiron 3153 firmware< 1.22.0nvdUScpe:2.3:o:dell:inspiron_3153_firmware:*:*:*:*:*:*:*:*
dell inspiron 3158 firmware< 1.22.0nvdUScpe:2.3:o:dell:inspiron_3158_firmware:*:*:*:*:*:*:*:*
dell inspiron 3268 firmware< 1.11.1nvdUScpe:2.3:o:dell:inspiron_3268_firmware:*:*:*:*:*:*:*:*
dell inspiron 3458 firmware< a18nvdUScpe:2.3:o:dell:inspiron_3458_firmware:*:*:*:*:*:*:*:*
dell inspiron 3459 firmware< 1.9.0nvdUScpe:2.3:o:dell:inspiron_3459_firmware:*:*:*:*:*:*:*:*
dell inspiron 3467 firmware< 2.9.0nvdUScpe:2.3:o:dell:inspiron_3467_firmware:*:*:*:*:*:*:*:*
dell inspiron 3468 firmware< 1.12.0nvdUScpe:2.3:o:dell:inspiron_3468_firmware:*:*:*:*:*:*:*:*
dell inspiron 3470 firmware< 1.5.21nvdUScpe:2.3:o:dell:inspiron_3470_firmware:*:*:*:*:*:*:*:*

showing 20 of 242

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2019-08-05modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan