CVE-2020-5362

· HIGHModified

← All CVEs

CVSS v3.1

7.1

EPSS

0.29%

Published

Jun 10, 2020

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:H

Weaknesses (CWE)

CWE-285CWE-862

Affected Products (708)

dell · chengming_3967_firmware (up to 1.9.0)vulnerable

dell · chengming_3967

dell · chengming_3977_firmware (up to 1.9.0)vulnerable

dell · chengming_3977

dell · chengming_3980_firmware (up to 2.16.0)vulnerable

dell · chengming_3980

dell · chengming_3988_firmware (up to 1.3.0)vulnerable

dell · chengming_3988

dell · chengming_3990_firmware (up to 1.1.3)vulnerable

dell · chengming_3990

dell · chengming_3991_firmware (up to 1.1.3)vulnerable

dell · chengming_3991

dell · g3_15_3500_firmware (up to 1.2.1)vulnerable

dell · g3_15_3500

dell · g3_15_3590_firmware (up to 1.11.0)vulnerable

dell · g3_15_3590

dell · g3_3579_firmware (up to 1.13.0)vulnerable

dell · g3_3579

dell · g3_3779_firmware (up to 1.13.0)vulnerable

dell · g3_3779

dell · g5_15_5500_firmware (up to 1.2.1)vulnerable

dell · g5_15_5500

dell · g5_15_5590_firmware (up to 1.13.2)vulnerable

dell · g5_15_5590

dell · g5_5587_firmware (up to 1.14.0)vulnerable

dell · g5_5587

dell · g7_15_7590_firmware (up to 1.13.2)vulnerable

dell · g7_15_7590

dell · g7_17_7790_firmware (up to 1.13.2)vulnerable

dell · g7_17_7790

dell · g7_7588_firmware (up to 1.14.0)vulnerable

dell · g7_7588

dell · embedded_box_pc_5000_firmware (up to 1.8.0)vulnerable

dell · embedded_box_pc_5000

dell · g5_5090_firmware (up to 1.3.0)vulnerable

dell · g5_5090

dell · inspiron_11_2-in-1_3153_firmware (up to 1.25.0)vulnerable

dell · inspiron_11_2-in-1_3153

dell · inspiron_11_2-in-1_3158_firmware (up to 1.25.0)vulnerable

dell · inspiron_11_2-in-1_3158

dell · inspiron_13_7370_firmware (up to 1.17.0)vulnerable

dell · inspiron_13_7370

dell · inspiron_13_2-in-1_5368_firmware (up to 1.22.0)vulnerable

dell · inspiron_13_2-in-1_5368

dell · inspiron_13_2-in-1_5378_firmware (up to 1.30.0)vulnerable

dell · inspiron_13_2-in-1_5378

dell · inspiron_13_2-in-1_5379_firmware (up to 1.14.0)vulnerable

dell · inspiron_13_2-in-1_5379

dell · inspiron_13_2-in-1_7353_firmware (up to 1.25.0)vulnerable

dell · inspiron_13_2-in-1_7353

...and 658 more

References (2)

https://www.dell.com/support/article/SLN321726

Vendor Advisory

https://www.dell.com/support/article/SLN321726

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs