What is CVE-2024-0160?

CVE-2024-0160 is a medium-severity vulnerability in Dell Cpg Bios, classified under Incorrect Authorization. CVSS score: 6.8/10. Published 2024-06-12.

How severe is CVE-2024-0160?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Auth bypass in Dell Cpg Bios

CVE-2024-0160

Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS.

Vulnerability class: Broken Access Control

EPSS: 0.002 (16.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dell Cpg Bios — versions N/A
Dell G3_3500
Dell G3_3500_firmware
Dell G5_5500
Dell G5_5500_firmware
Dell G7_7500
Dell G7_7500_firmware
Dell G7_7700
Dell G7_7700_firmware
Dell Inspiron_7500

Weakness classification (CWE)

CWE-863 — Incorrect Authorization

References

security_alert@emc.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2024-0160?: CVE-2024-0160 is a medium-severity vulnerability in Dell Cpg Bios, classified under Incorrect Authorization. CVSS score: 6.8/10. Published 2024-06-12.
How severe is CVE-2024-0160?: Medium severity. CVSS v3 base score is 6.8 out of 10.