Skip to content
Fencer Vulns
high 7.1

CVE-2019-3717 json

Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability.

published 2019-08-05 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-13352

cvss
7.1
version 3.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 30%
public exploits
0
none known

Summary

Select Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An unauthenticated attacker with physical access to the system could potentially bypass intended Secure Boot restrictions to run unsigned and untrusted code on expansion cards installed in the system during platform boot. Refer to https://www.dell.com/support/article/us/en/04/sln317683/dsa-2019-043-dell-client-improper-access-control-vulnerability?lang=en for versions affected by this vulnerability.

Patch / fix

  • dell chengming_3967_firmware 1.5.0
  • dell chengming_3977_firmware 1.6.0
  • dell chengming_3980_firmware 1.5.21
  • dell g3_3579_firmware 1.9.0
  • dell g3_3779_firmware 1.9.0
  • dell g5_5587_firmware 1.10.0
  • dell g5_5590_firmware 1.3.1
  • dell g7_7588_firmware 1.10.0
  • dell g7_7590_firmware 1.3.1
  • dell g7_7790_firmware 1.3.1
  • dell embedded_box_pc_5000_firmware 1.5.6
  • dell inspiron_3153_firmware 1.22.0
  • dell inspiron_3158_firmware 1.22.0
  • dell inspiron_5368_firmware 1.19.0
  • dell inspiron_5378_firmware 1.27.0
  • dell inspiron_5379_firmware 1.11.0
  • dell inspiron_7353_firmware 1.22.0
  • dell inspiron_7359_firmware 1.22.0
  • dell inspiron_7368_firmware 1.19.0
  • dell inspiron_7373_firmware 1.13.1

Exploit prediction

0.36% chance of exploitation in the next 30 days, higher than 30% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.0 7.1 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H
NVD 3.1 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

  • Dell Dell Client Commercial and Consumer platforms

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.