Vulnerability in Dell Chengming 3967
CVE-2019-3717
Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An unauthenticated attacker with physical access to the system could potentially bypass intended Secure Boot restrictions to run unsigned and untrusted code on expansion cards installed in the system during platform boot. Refer to https://www.dell.com/support/article/us/en/04/sln317683/dsa-2019-043-dell-client-improper-access-control-vulnerability?lang=en for versions affected by this vulnerability.
EPSS: 0.004 (28.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Dell Chengming_3967
- Dell Chengming_3967_firmware
- Dell Chengming_3977
- Dell Chengming_3977_firmware
- Dell Chengming_3980
- Dell Chengming_3980_firmware
- Dell Client Commercial And Consumer Platforms — versions https://www.dell.com/support/article/us/en/04/sln317683/dsa-2019-043-dell-client-improper-access-control-vulnerability?lang=en
- Dell Embedded_box_pc_5000
- Dell Embedded_box_pc_5000_firmware
- Dell G3_3579
References
- security_alert@emc.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-3717?
- CVE-2019-3717 is a medium-severity vulnerability in Dell Chengming 3967. CVSS score: 6.8/10. Published 2019-08-05.
- How severe is CVE-2019-3717?
- Medium severity. CVSS v3 base score is 6.8 out of 10.