CVE-2024-52541

State: Published
Severity: 8.2 High
Published: Feb 19, 2025
Updated: Feb 19, 2025
Reserved: Nov 12, 2024

Description

Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Scores

CVSS	Score	Vector	Source
3.1	8.2 High	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H	dell

Weaknesses

CWE-1390 Weak Authentication

Affected Products

Product	Versions
Dell Client Platform BIOSDell	before 1.34.0Affected before 1.28.0Affected before 1.21.0Affected before 1.8.0Affected before 1.9.0Affected before 1.17.0Affected before 1.7.0Affected before 1.26.0Affected before 1.20.0Affected before 1.31.1Affected before 1.30.0Affected before 1.29.0Affected before 1.32.0Affected before 1.21.1Affected before 1.25.1Affected before 1.33.0Affected before 1.31.0Affected before 2.31.0Affected before 2.39.0Affected before 2.43.0Affected before 1.27.0Affected before 1.22.0Affected before 1.18.0Affected before 2.30.0Affected before 1.24.0Affected and 53 more versions

Product

Versions

Dell Client Platform BIOSDell

before 1.34.0Affected
before 1.28.0Affected
before 1.21.0Affected
before 1.8.0Affected
before 1.9.0Affected
before 1.17.0Affected
before 1.7.0Affected
before 1.26.0Affected
before 1.20.0Affected
before 1.31.1Affected
before 1.30.0Affected
before 1.29.0Affected
before 1.32.0Affected
before 1.21.1Affected
before 1.25.1Affected
before 1.33.0Affected
before 1.31.0Affected
before 2.31.0Affected
before 2.39.0Affected
before 2.43.0Affected
before 1.27.0Affected
before 1.22.0Affected
before 1.18.0Affected
before 2.30.0Affected
before 1.24.0Affected
and 53 more versions

References

https://www.dell.com/support/kbdoc/en-us/000258429/dsa-2025-021vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.