CVE-2024-38296
Last modified
CVE-2024-38296 is a medium-severity vulnerability rated 4.4/10 on the CVSS scale. Dell Edge Gateway 3200, versions prior to 15.40.30.2879, and Edge Gateway 5200, versions prior to 12.0.94.2380, contain an Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.
Description
Dell Edge Gateway 3200, versions prior to 15.40.30.2879, and Edge Gateway 5200, versions prior to 12.0.94.2380, contain an Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Intel Management Engine Firmware Update Utility | < 15.40.30.2879 |
| Dell | Intel Management Engine Firmware Update Utility | < 12.0.94.2380 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-38296?
How severe is CVE-2024-38296?
How do I fix CVE-2024-38296?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-38290In XIQ-SE before 24.2.11, a server misconfiguration may allo…5.3
- CVE-2024-38291In XIQ-SE before 24.2.11, a low-privileged user may be able …8.8
- CVE-2024-38292In Extreme Networks XIQ-SE before 24.2.11, due to a missing …9.8
- CVE-2024-38293ALCASAR before 3.6.1 allows CSRF and remote code execution i…9.6
- CVE-2024-38294ALCASAR before 3.6.1 allows email_registration_back.php remo…9.8
- CVE-2024-38295ALCASAR before 3.6.1 allows still_connected.php remote code …9.8
- CVE-2024-38301Dell Alienware Command Center, version 5.7.3.0 and prior, co…7.8
- CVE-2024-38302Dell Data Lakehouse, version(s) 1.0.0.0, contain(s) a Missin…5.7
- CVE-2024-38303Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to …6
- CVE-2024-38304Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to …6.5
- CVE-2024-38305Dell SupportAssist for Home PCs Installer exe version 4.0.3 …7.3
- CVE-2024-38306In the Linux kernel, the following vulnerability has been re…4.7
Are you affected by CVE-2024-38296?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST