CVE-2024-0158: dell alienware_m15_r6_firmware Improper Input Validation
Vulnerability summary
CVE-2024-0158 is a medium (CVSS 6.7) Improper Input Validation vulnerability in dell alienware_m15_r6_firmware. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 3.5% of scored vulnerabilities.
Timeline
- 02-07-2024PublishedVulnerability first disclosed.
- 01-08-2024Last modifiedVulnerability information updated.
Description
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA5.1MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:LDiffers
EPSS trend
Probability
0.15%
Chance of exploitation in the next 30 days
Percentile
4%
Versus all other CVEs
30-day change
0.00 pp
From 0.15% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Dell200 products
- alienware_m15_r6_firmware< 1.28.0
- alienware_m15_r7_firmware< 1.28.0
- alienware_m16_r1_firmware< 1.15.0
- alienware_m18_r1_firmware< 1.15.0
- alienware_m18_r2_firmware< 1.2.1
1 vendor · 200 products · Showing 200 of 389. Use Open JSON for the complete list.
References
1 links- www.dell.com/support/…Vendor Advisory