Input validation error in Intel products - CVE-2024-24582

Vulnerability identifier: #VU104036

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-24582

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of user-supplied input in XmlCli feature. A local administrator can pass specially crafted input to the application and gain elevated privileges.

UEFI firmware
12th Generation Intel Core Processors
Intel Pentium Gold Processor Series
Intel Celeron Processors
13th Generation Intel Core Processors
Intel Core Ultra family
OptiPlex 7400 All-In-One
OptiPlex 5400 All-In-One
Pro Rugged 14 RB14250
Pro Rugged 13 RA13250
Inspiron 16 5640
Alienware m16 R2
Inspiron 16 7640 2-in-1
Inspiron 24 5430 All-in-One
Inspiron 27 7730 All-in-One
Vostro 16 5640
Alienware x16 R2
Latitude 7350 Detachable
Inspiron 14 5440
Inspiron 14 7440 2-in-1
Latitude 3450
Latitude 3550
Vostro 14 3440
Precision 3280 CFF
Latitude 9450
Precision 5490
Alienware M18 R2
XPS 14 9440
Latitude 7350
Latitude 5350
Latitude 7450
Latitude 7650
XPS 16 9640
Precision 3680 Tower
OptiPlex Tower 7020
Inspiron 3030
Inspiron 3030S
Inspiron 16 Plus 7640
Vostro 3030S
Vostro 3030
Inspiron 14 Plus 7440
OptiPlex Micro 7020
OptiPlex SFF 7020
Precision 3591
OptiPlex AIO 7420
Latitude 5550
Precision 3590
Latitude 5450
Precision 3490
Latitude 7030 Rugged Extreme
Inspiron 24 5420 All-in-One
Inspiron 27 7720 All-in-One
XPS 17 9730
Precision 5680
Latitude 9440 2-in-1
Alienware Aurora R15
Vostro 16 5630
Inspiron 14 5430
Inspiron 14 Plus 7430
Inspiron 16 7630 2-in-1
Inspiron 16 Plus 7630
Inspiron 16 5630
Inspiron 14 7430 2-in-1
Latitude 3540
Latitude 3440
Latitude 3340
Precision 7780
Latitude 5340
Precision 3581
Precision 7680
Precision 3580
Latitude 5540
Inspiron 13 5330
Latitude 7440
Alienware x16 R1
Alienware x14 R2
Latitude 7640
Precision 3480
Latitude 7340
Latitude 5440
XPS 9315 2-in-1
Vostro 3020 Small Desktop
Inspiron 3020 Desktop
OptiPlex Tower 7010 / OptiPlex Tower Plus 7010
OptiPlex Small Form Factor 7010 / OptiPlex Small Form Factor Plus 7010
OptiPlex All-in-One 7410
OptiPlex Micro 7010 / OptiPlex Micro Plus 7010
Inspiron 3020 Small Desktop
Vostro 3020 Tower Desktop
Dell G15 5530
Dell G16 7630
ChengMing 3910/3911
Latitude 7230 Rugged Extreme
XPS 8950
Alienware Aurora R13
Vostro 5320
Alienware x14
Inspiron 13 5320
Latitude 3530
Alienware m18 R1
Alienware m16 R1
Latitude 3430
Alienware x15 R2
Alienware x17 R2
Inspiron 16 7620 2-in-1
Inspiron 14 7420 2-in-1
Inspiron 14 5420
XPS 13 9315
Inspiron 16 5620
Inspiron 5410 All-In-One
Vostro 5620
Latitude 3330
Inspiron 7710 All-in-One
Latitude 9330
Precision 7770
Inspiron 14 Plus 7420
Inspiron 16 Plus 7620
Precision 3570
Latitude 5330
Vostro 7620
Precision 7670
Latitude 5430
Latitude 5530
Precision 5470
Vostro 3710
Vostro 3910
Latitude 5531
Precision 3470
ChengMing 3900
Inspiron 3910
OptiPlex XE4 Tower
OptiPlex XE4 SFF
OptiPlex 7000 Micro / OptiPlex 7000 Small Form Factor / OptiPlex 7000 Tower / OptiPlex 7000 XE Micro
OptiPlex 5000 Micro / OptiPlex 5000 Small Form Factor / OptiPlex 5000 Tower
Latitude 5431
OptiPlex 3000 Micro / OptiPlex 3000 Small Form Factor / OptiPlex 3000 Tower
Precision 3571
Latitude 7530
XPS 15 9520
Latitude 7330
Latitude 7430
Latitude 9430
Precision 5570
Vostro 15 3520
Vostro 14 3420
Inspiron 15 3520
Dell G16 7620
Dell G15 5520
Alienware m15 R7
Precision 5770
XPS 17 9720
XPS 8960
AURORA R16
XPS 13 Plus 9320
XPS 9320
Precision 3660
Precision 3460 XE Small Form Factor / Precision 3460 Small Form Factor
Precision 3260 XE Compact / Precision 3260 Compact
openEuler
Fedora
microcode_ctl

Install updates from vendor's website.

OptiPlex 7400 All-In-One - update to 1.1.46
OptiPlex 5400 All-In-One - update to 1.1.46
Pro Rugged 14 RB14250 - update to 1.3.1
Pro Rugged 13 RA13250 - update to 1.3.1
Inspiron 16 5640 - update to 1.9.0
Alienware m16 R2 - update to 1.9.0
Inspiron 16 7640 2-in-1 - update to 1.9.0
Inspiron 24 5430 All-in-One - update to 1.9.0
Inspiron 27 7730 All-in-One - update to 1.9.0
Vostro 16 5640 - update to 1.9.0
Alienware x16 R2 - update to 1.9.0
Latitude 7350 Detachable - update to 1.9.1
Inspiron 14 5440 - update to 1.10.0
Inspiron 14 7440 2-in-1 - update to 1.10.0
Latitude 3450 - update to 1.10.0
Latitude 3550 - update to 1.10.0
Vostro 14 3440 - update to 1.10.0
Precision 3280 CFF - update to 1.10.0
Latitude 9450 - update to 1.10.1
Precision 5490 - update to 1.10.1
Alienware M18 R2 - update to 1.11.0
XPS 14 9440 - update to 1.11.0
Latitude 7350 - update to 1.11.1
Latitude 5350 - update to 1.11.1
Latitude 7450 - update to 1.11.1
Latitude 7650 - update to 1.11.1
XPS 16 9640 - update to 1.11.1
Precision 3680 Tower - update to 1.11.1
OptiPlex Tower 7020 - update to 1.12.0
Inspiron 3030 - update to 1.12.0
Inspiron 3030S - update to 1.12.0
Inspiron 16 Plus 7640 - update to 1.12.0
Vostro 3030S - update to 1.12.0
Vostro 3030 - update to 1.12.0
Inspiron 14 Plus 7440 - update to 1.12.0
OptiPlex Micro 7020 - update to 1.12.0
OptiPlex SFF 7020 - update to 1.12.0
Precision 3591 - update to 1.12.1
OptiPlex AIO 7420 - update to 1.12.1
Latitude 5550 - update to 1.12.1
Precision 3590 - update to 1.12.1
Latitude 5450 - update to 1.12.2
Precision 3490 - update to 1.12.2
Latitude 7030 Rugged Extreme - update to 1.13.3
Inspiron 24 5420 All-in-One - update to 1.16.1
Inspiron 27 7720 All-in-One - update to 1.16.1
XPS 17 9730 - update to 1.17.0
Precision 5680 - update to 1.17.0
Latitude 9440 2-in-1 - update to 1.17.1
Alienware Aurora R15 - update to 1.18.0
Vostro 16 5630 - update to 1.19.0
Inspiron 14 5430 - update to 1.19.0
Inspiron 14 Plus 7430 - update to 1.19.0
Inspiron 16 7630 2-in-1 - update to 1.19.0
Inspiron 16 Plus 7630 - update to 1.19.0
Inspiron 16 5630 - update to 1.19.0
Inspiron 14 7430 2-in-1 - update to 1.19.0
Latitude 3540 - update to 1.19.1
Latitude 3440 - update to 1.19.1
Latitude 3340 - update to 1.19.1
Precision 7780 - update to 1.19.2
Latitude 5340 - update to 1.19.2
Precision 3581 - update to 1.19.2
Precision 7680 - update to 1.19.2
Precision 3580 - update to 1.19.2
Latitude 5540 - update to 1.19.2
Inspiron 13 5330 - update to 1.20.0
Latitude 7440 - update to 1.20.1
Alienware x16 R1 - update to 1.20.1
Alienware x14 R2 - update to 1.20.1
Latitude 7640 - update to 1.20.1
Precision 3480 - update to 1.20.2
Latitude 7340 - update to 1.20.2
Latitude 5440 - update to 1.20.2
XPS 9315 2-in-1 - update to 1.21.0
Vostro 3020 Small Desktop - update to 1.22.0
Inspiron 3020 Desktop - update to 1.22.0
OptiPlex Tower 7010 / OptiPlex Tower Plus 7010 - update to 1.22.0
OptiPlex Small Form Factor 7010 / OptiPlex Small Form Factor Plus 7010 - update to 1.22.0
OptiPlex All-in-One 7410 - update to 1.22.0
OptiPlex Micro 7010 / OptiPlex Micro Plus 7010 - update to 1.22.0
Inspiron 3020 Small Desktop - update to 1.22.0
Vostro 3020 Tower Desktop - update to 1.22.0
Dell G15 5530 - update to 1.22.0
Dell G16 7630 - update to 1.22.0
ChengMing 3910/3911 - update to 1.22.0
Latitude 7230 Rugged Extreme - update to 1.22.2
XPS 8950 - update to 1.23.0
Alienware Aurora R13 - update to 1.23.0
Vostro 5320 - update to 1.23.0
Alienware x14 - update to 1.23.0
Inspiron 13 5320 - update to 1.23.0
Latitude 3530 - update to 1.24.0
Alienware m18 R1 - update to 1.24.0
Alienware m16 R1 - update to 1.24.0
Latitude 3430 - update to 1.24.0
Alienware x15 R2 - update to 1.24.0
Alienware x17 R2 - update to 1.24.0
Inspiron 16 7620 2-in-1 - update to 1.25.0
Inspiron 14 7420 2-in-1 - update to 1.25.0
Inspiron 14 5420 - update to 1.26.0
XPS 13 9315 - update to 1.26.0
Inspiron 16 5620 - update to 1.26.0
Inspiron 5410 All-In-One - update to 1.26.0
Vostro 5620 - update to 1.26.0
Latitude 3330 - update to 1.26.0
Inspiron 7710 All-in-One - update to 1.26.0
Latitude 9330 - update to 1.26.1
Precision 7770 - update to 1.27.0
Inspiron 14 Plus 7420 - update to 1.27.0
Inspiron 16 Plus 7620 - update to 1.27.0
Precision 3570 - update to 1.27.0
Latitude 5330 - update to 1.27.0
Vostro 7620 - update to 1.27.0
Precision 7670 - update to 1.27.0
Latitude 5430 - update to 1.27.0
Latitude 5530 - update to 1.27.0
Precision 5470 - update to 1.28.0
Vostro 3710 - update to 1.28.0
Vostro 3910 - update to 1.28.0
Latitude 5531 - update to 1.28.0
Precision 3470 - update to 1.28.0
ChengMing 3900 - update to 1.28.0
Inspiron 3910 - update to 1.28.0
OptiPlex XE4 Tower - update to 1.28.0
OptiPlex XE4 SFF - update to 1.28.0
OptiPlex 7000 Micro / OptiPlex 7000 Small Form Factor / OptiPlex 7000 Tower / OptiPlex 7000 XE Micro - update to 1.28.0
OptiPlex 5000 Micro / OptiPlex 5000 Small Form Factor / OptiPlex 5000 Tower - update to 1.28.0
Latitude 5431 - update to 1.28.0
OptiPlex 3000 Micro / OptiPlex 3000 Small Form Factor / OptiPlex 3000 Tower - update to 1.28.0
Precision 3571 - update to 1.28.0
Latitude 7530 - update to 1.29.0
XPS 15 9520 - update to 1.29.0
Latitude 7330 - update to 1.29.0
Latitude 7430 - update to 1.29.0
Latitude 9430 - update to 1.29.0
Precision 5570 - update to 1.29.0
Vostro 15 3520 - update to 1.30.0
Vostro 14 3420 - update to 1.30.0
Inspiron 15 3520 - update to 1.30.0
Dell G16 7620 - update to 1.30.0
Dell G15 5520 - update to 1.30.0
Alienware m15 R7 - update to 1.30.0
Precision 5770 - update to 1.30.1
XPS 17 9720 - update to 1.30.1
microcode_ctl - addressed in versions 2.1-61.6.fc40, 2.1-67.1.fc41
XPS 8960 - update to 2.13.0
AURORA R16 - update to 2.14.0
XPS 13 Plus 9320 - update to 2.18.1
XPS 9320 - update to 2.18.1
Precision 3660 - update to 2.22.0
Precision 3460 XE Small Form Factor / Precision 3460 Small Form Factor - update to 3.12.0
Precision 3260 XE Compact / Precision 3260 Compact - update to 3.12.0
microcode_ctl - update to 20250211-1

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html

• Multiple vulnerabilities in Intel UEFI Firmware
• Fedora 40 update for microcode_ctl
• Fedora 41 update for microcode_ctl
• openEuler update for microcode_ctl
• Multiple vulnerabilities in Dell Client Platform