📦

latitude_5411

Vendor: dell

Actively Exploited 1 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 9 Remote Access
Total CVEs 69 Total Indexed
Avg. EPSS 1.09% Exploit Prob.
Latest CVE CVE-2024-52541 Feb 19

Security Vulnerability Index

Page 1 / 7
8.2 CVSS

Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

EPSS: 0.16%
6.7 CVSS

Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service.

EPSS: 0.17%
5.1 CVSS

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges

EPSS: 0.15%
3.8 CVSS

Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

EPSS: 0.12%
4.7 CVSS

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.

EPSS: 0.18%
6.8 CVSS

Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send malicious data to the device in order to cause some services to cease to function.

EPSS: 0.49%
6.7 CVSS

Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.

EPSS: 0.16%
6.9 CVSS

Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the system.

EPSS: 0.17%
5.1 CVSS

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.

EPSS: 0.17%
5.1 CVSS

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable.

EPSS: 0.17%