VULNERABILITY INTELLIGENCE
CVE-2024-0160
CVSS score6.8 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2024-06-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS.
Weakness classification
- security_alert@emc.com: CWE-863
Primary references
- security_alert@emc.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory