CVE-2024-38296

4.4 mediumEPSS 0.2%

Medium (4.4) in dell intel management engine firmware update utility. EPSS 0.2% chance of exploitation in the next 30 days.

Dell Edge Gateway 3200, versions prior to 15.40.30.2879, and Edge Gateway 5200, versions prior to 12.0.94.2380, contain an Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

Severity

CVSS 3.1

4.4 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
Published: 2024-11-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:intel_management_engine_firmware_update_utility

References

https://www.dell.com/support/kbdoc/en-us/000250949/dsa-2024-345-security-update-for-dell-networking-edge-gateway-5200-vulnerability

Check your stack JSON