CVSS 3.1
8.2 highCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HCVE-2024-39584
High (8.2) in dell. EPSS 0.2% chance of exploitation in the next 30 days.
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
- CWE
- CWE-1392
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:alienware_area_51m_r2_firmware
- dell:alienware_aurora_r13_firmware
- dell:alienware_aurora_r15_amd_firmware
- dell:alienware_aurora_r15_firmware
- dell:alienware_aurora_ryzen_edition_r14_firmware
- dell:alienware_m15_r3_firmware
- dell:alienware_m15_r4_firmware
- dell:alienware_m17_r3_firmware
- dell:alienware_m17_r4_firmware
- dell:alienware_x14_firmware
- dell:alienware_x15_r1_firmware
- dell:alienware_x15_r2_firmware
- dell:alienware_x17_r1_firmware
- dell:alienware_x17_r2_firmware
- dell:aurora_r16_firmware
- dell:inspiron_15_3510_firmware
- dell:inspiron_15_3521_firmware
- dell:inspiron_3502_firmware
- dell:xps_8950_firmware
- dell:xps_8960_firmware