What is CVE-2024-28970?

CVE-2024-28970 is a medium-severity vulnerability in Dell Cpg Bios, classified under Out-of-bounds Write. CVSS score: 4.7/10. Published 2024-06-12.

How severe is CVE-2024-28970?

Medium severity. CVSS v3 base score is 4.7 out of 10.

Buffer overflow in Dell Cpg Bios

CVE-2024-28970

Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of service.

Vulnerability class: Buffer Overflow

EPSS: 0.001 (3.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H.

Affected products

Dell Cpg Bios — versions N/A
Dell G7_7500
Dell G7_7500_firmware
Dell G7_7700
Dell G7_7700_firmware
Dell Inspiron_14_plus_7440
Dell Inspiron_14_plus_7440_firmware
Dell Inspiron_16_7640_2-in-1
Dell Inspiron_16_7640_2-in-1_firmware
Dell Inspiron_16_plus_7640

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

security_alert@emc.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2024-28970?: CVE-2024-28970 is a medium-severity vulnerability in Dell Cpg Bios, classified under Out-of-bounds Write. CVSS score: 4.7/10. Published 2024-06-12.
How severe is CVE-2024-28970?: Medium severity. CVSS v3 base score is 4.7 out of 10.