CVE-2019-3717: Dell Chengming 3967 Firmware

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An unauthenticated attacker with physical access to the system could potentially bypass intended Secure Boot restrictions to run unsigned and untrusted code on expansion cards installed in the system during platform boot. Refer to https://www.dell.com/support/article/us/en/04/sln317683/dsa-2019-043-dell-client-improper-access-control-vulnerability?lang=en for versions affected by this vulnerability.

Affected products

  • Dell Chengming 3967 Firmware: before 1.5.0 (fixed in 1.5.0)
  • Dell Chengming 3977 Firmware: before 1.6.0 (fixed in 1.6.0)
  • Dell Chengming 3980 Firmware: before 1.5.21 (fixed in 1.5.21)
  • Dell Embedded Box Pc 5000 Firmware: before 1.5.6 (fixed in 1.5.6)
  • Dell g3 3579 Firmware: before 1.9.0 (fixed in 1.9.0)
  • Dell g3 3779 Firmware: before 1.9.0 (fixed in 1.9.0)
  • Dell g5 5587 Firmware: before 1.10.0 (fixed in 1.10.0)
  • Dell g5 5590 Firmware: before 1.3.1 (fixed in 1.3.1)
  • Dell g7 7588 Firmware: before 1.10.0 (fixed in 1.10.0)
  • Dell g7 7590 Firmware: before 1.3.1 (fixed in 1.3.1)
  • Dell g7 7790 Firmware: before 1.3.1 (fixed in 1.3.1)
  • Dell Inspiron 3153 Firmware: before 1.22.0 (fixed in 1.22.0)
  • Dell Inspiron 3158 Firmware: before 1.22.0 (fixed in 1.22.0)
  • Dell Inspiron 3268 Firmware: before 1.11.1 (fixed in 1.11.1)
  • Dell Inspiron 3458 Firmware: before a18 (fixed in a18)
  • Dell Inspiron 3459 Firmware: before 1.9.0 (fixed in 1.9.0)
  • Dell Inspiron 3467 Firmware: before 2.9.0 (fixed in 2.9.0)
  • Dell Inspiron 3468 Firmware: before 1.12.0 (fixed in 1.12.0)
  • Dell Inspiron 3470 Firmware: before 1.5.21 (fixed in 1.5.21)
  • Dell Inspiron 3476 Firmware: before 1.7.0 (fixed in 1.7.0)
  • Dell Inspiron 3480 Firmware: before 1.4.1 (fixed in 1.4.1)
  • Dell Inspiron 3481 Firmware: before 1.2.0 (fixed in 1.2.0)
  • Dell Inspiron 3558 Firmware: before a18 (fixed in a18)
  • Dell Inspiron 3559 Firmware: before 1.9.0 (fixed in 1.9.0)
  • Dell Inspiron 3567 Firmware: before 2.9.0 (fixed in 2.9.0)
  • and 216 more

Published 2019-08-05. Last modified 2026-06-17.