CVE-2024-38296: dell edge_gateway_5200_firmware

Vulnerability summary

CVE-2024-38296 is a medium (CVSS 6.7) vulnerability in dell edge_gateway_5200_firmware. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10.4% of scored vulnerabilities.

Timeline

1. 22-11-2024
   PublishedVulnerability first disclosed.
2. 09-12-2024
   Last modifiedVulnerability information updated.

Description

Dell Edge Gateway 3200, versions prior to 15.40.30.2879, and Edge Gateway 5200, versions prior to 12.0.94.2380, contain an Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

• CWE-1421Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient ExecutionA processor event may allow transient operations to access architecturally restricted data (for example, in another address space) in a shared microarchitectural structure (for example, a CPU cache), potentially exposing the data over a covert channel.