Dell Latitude 5424 Rugged Firmware 1.5.0

CPE Details

Dell Latitude 5424 Rugged Firmware 1.5.0
dell
latitude_5424_rugged_firmware
1.5.0
2020-03-06
18h58 +00:00
2020-03-06
18h58 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:dell:latitude_5424_rugged_firmware:1.5.0:*:*:*:*:*:*:*

Informations

Vendor

dell

Product

latitude_5424_rugged_firmware

Version

1.5.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-43078 2024-08-28 05h33 +00:00 Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service.
7.3
High
CVE-2024-38483 2024-08-14 09h24 +00:00 Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
6.7
Medium
CVE-2024-0158 2024-07-02 06h20 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges
6.7
Medium
CVE-2024-32855 2024-06-25 04h06 +00:00 Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
4.4
Medium
CVE-2024-22429 2024-05-17 15h20 +00:00 Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution.
7.5
High
CVE-2023-48674 2024-03-01 12h35 +00:00 Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send malicious data to the device in order to cause some services to cease to function.
6.8
Medium
CVE-2023-28075 2023-08-16 19h15 +00:00 Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.
6.9
Medium
CVE-2023-28058 2023-06-23 10h30 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28050 2023-06-23 10h25 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28026 2023-06-23 10h23 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28044 2023-06-23 10h20 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28060 2023-06-23 10h17 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-25938 2023-06-23 10h13 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28031 2023-06-23 10h11 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28034 2023-06-23 10h08 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28027 2023-06-23 10h04 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28036 2023-06-23 10h01 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28032 2023-06-23 09h59 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28028 2023-06-23 09h56 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28039 2023-06-23 09h51 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28040 2023-06-23 09h48 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28056 2023-06-23 09h46 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28030 2023-06-23 09h43 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-25937 2023-06-23 09h40 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28033 2023-06-23 09h37 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28035 2023-06-23 09h34 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28041 2023-06-23 09h25 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28042 2023-06-23 09h22 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28061 2023-06-23 09h19 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28059 2023-06-23 09h16 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28029 2023-06-23 09h12 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable
6.7
Medium
CVE-2023-28054 2023-06-23 09h06 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-28052 2023-06-23 09h02 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2023-25936 2023-06-23 08h56 +00:00 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.
6.7
Medium
CVE-2022-34398 2023-02-01 05h28 +00:00 Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system.
7.5
High
CVE-2022-26861 2022-09-06 20h15 +00:00 Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.
7.9
High
CVE-2022-26860 2022-09-06 20h15 +00:00 Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM.
7.8
High
CVE-2022-26859 2022-09-06 20h15 +00:00 Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM.
7
High
CVE-2022-26858 2022-09-06 20h15 +00:00 Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls.
7.8
High
CVE-2020-5362 2020-06-10 20h40 +00:00 Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values.
7.1
High
CVE-2020-5324 2020-02-21 14h50 +00:00 Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is limited to the Dell Firmware Update Utility during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged malicious user could exploit this vulnerability by tricking an administrator into overwriting arbitrary files via a symlink attack. The vulnerability does not affect the actual binary payload that the update utility delivers.
7.1
High