CVE-2024-39584: Dell Alienware Area 51m r2 Firmware

High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.

Affected products

• Dell Alienware Area 51m r2 Firmware: before 1.29.0 (fixed in 1.29.0)
• Dell Alienware Aurora r13 Firmware: before 1.21.0 (fixed in 1.21.0)
• Dell Alienware Aurora r15 AMD Firmware: before 1.15.0 (fixed in 1.15.0)
• Dell Alienware Aurora r15 Firmware: before 1.17.0 (fixed in 1.17.0)
• Dell Alienware Aurora Ryzen Edition r14 Firmware: before 2.19.1 (fixed in 2.19.1)
• Dell Alienware m15 r3 Firmware: before 1.29.0 (fixed in 1.29.0)
• Dell Alienware m15 r4 Firmware: before 1.24.0 (fixed in 1.24.0)
• Dell Alienware m17 r3 Firmware: before 1.29.0 (fixed in 1.29.0)
• Dell Alienware m17 r4 Firmware: before 1.24.0 (fixed in 1.24.0)
• Dell Alienware x14 Firmware: before 1.21.0 (fixed in 1.21.0)
• Dell Alienware x15 r1 Firmware: before 1.24.0 (fixed in 1.24.0)
• Dell Alienware x15 r2 Firmware: before 1.22.0 (fixed in 1.22.0)
• Dell Alienware x17 r1 Firmware: before 1.24.0 (fixed in 1.24.0)
• Dell Alienware x17 r2 Firmware: before 1.22.0 (fixed in 1.22.0)
• Dell Aurora r16 Firmware: before 2.13.0 (fixed in 2.13.0)
• Dell Inspiron 15 3510 Firmware: before 1.21.0 (fixed in 1.21.0)
• Dell Inspiron 15 3521 Firmware: before 1.16.0 (fixed in 1.16.0)
• Dell Inspiron 3502 Firmware: before 1.18.0 (fixed in 1.18.0)
• Dell Xps 8950 Firmware: before 1.21.0 (fixed in 1.21.0)
• Dell Xps 8960 Firmware: before 2.12.0 (fixed in 2.12.0)

Published 2024-08-28. Last modified 2026-06-17.