CVEvulnerability

CVE-2020-5326

5.3 MEDIUM Published 2020-02-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-02-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-306

Description

Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology (iRST) Manager menu. An attacker with physical access to the system could perform unauthorized changes to the BIOS Setup configuration settings without requiring the BIOS Admin password by selecting the Optimized Defaults option in the pre-boot iRST Manager.

Affected configurations

• dell chengming 3980 firmware (< 2.13.0) • dell g3 3579 firmware (< 1.10.0) • dell g3 3590 firmware (< 1.4.3) • dell g3 3779 firmware (< 1.10.0) • dell g5 5587 firmware (< 1.11.1) • dell g5 5590 firmware (< 1.8.0) • dell g7 7588 firmware (< 1.11.1) • dell g7 7590 firmware (< 1.8.0) • dell g7 7790 firmware (< 1.8.0) • dell embedded box pc 5000 firmware (< 1.6.0) • dell inspiron 14 gaming 7466 firmware (< 1.5.0) • dell inspiron 14 gaming 7467 firmware (< 1.10.0) • dell inspiron 15 7572 firmware (< 1.2.1) • dell inspiron 15 gaming 7566 firmware (< 1.5.0) • dell inspiron 15 gaming 7567 firmware (< 1.10.0) • dell inspiron 15 gaming 7577 firmware (< 1.8.0) • dell inspiron 3470 firmware (< 2.13.0) • dell inspiron 3480 firmware (< 1.5.1) • dell inspiron 3481 firmware (< 1.4.0) • dell inspiron 3580 firmware (< 1.5.1) • dell inspiron 3581 firmware (< 1.4.0) • dell inspiron 3583 firmware (< 1.5.1) • dell inspiron 3584 firmware (< 1.4.0) • dell inspiron 3670 firmware (< 2.13.0) • dell inspiron 3780 firmware (< 1.5.1) • dell inspiron 3781 firmware (< 1.4.0) • dell inspiron 5370 firmware (< 1.12.0) • dell inspiron 5480 firmware (< 2.4.0) • dell inspiron 5481 firmware (< 2.4.0) • dell inspiron 5482 firmware (< 2.4.0) • dell inspiron 5488 firmware (< 2.4.0) • dell inspiron 5570 firmware (< 1.2.3) • dell inspiron 5580 firmware (< 2.4.0) • dell inspiron 5582 firmware (< 2.4.0) • dell inspiron 5770 firmware (< 1.2.3) • dell inspiron 7380 firmware (< 1.8.0) • dell inspiron 7386 firmware (< 1.5.0) • dell inspiron 7472 firmware (< 1.2.1) • dell inspiron 7580 firmware (< 1.8.0) • dell inspiron 7586 firmware (< 1.5.0) • dell inspiron 7590 firmware (< 1.1.1) • dell inspiron 7591 firmware (< 1.1.1) • dell inspiron 7786 firmware (< 1.5.0) • dell latitude 3300 firmware (< 1.4.0) • dell latitude 3460 firmware (< a17) • dell latitude 3480 firmware (< 1.12.0) • dell latitude 3490 firmware (< 1.9.9) • dell latitude 3580 firmware (< 1.12.0) • dell latitude 3590 firmware (< 1.9.9) • dell latitude 5175 firmware (< 1.7.1) • dell latitude 5179 firmware (< 1.7.1) • dell latitude 5280 firmware (< 1.15.1) • dell latitude 5288 firmware (< 1.15.1) • dell latitude 5289 firmware (< 1.18.1) • dell latitude 5290 firmware (< 1.9.0) • dell latitude 5300 firmware (< 1.3.1) • dell latitude 5400 firmware (< 1.3.11) • dell latitude 5401 firmware (< 1.3.11) • dell latitude 5414 firmware (< 1.24.0) • dell latitude 5420 rugged firmware (< 1.5.0) … and 114 more

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References