CVEvulnerability
CVE-2020-5362
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-06-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:H
- CVSS 3.1 ([email protected])
- 4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-285, CWE-862
Description
Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values.
Affected configurations
• dell chengming 3967 firmware (< 1.9.0)
• dell chengming 3977 firmware (< 1.9.0)
• dell chengming 3980 firmware (< 2.16.0)
• dell chengming 3988 firmware (< 1.3.0)
• dell chengming 3990 firmware (< 1.1.3)
• dell chengming 3991 firmware (< 1.1.3)
• dell g3 15 3500 firmware (< 1.2.1)
• dell g3 15 3590 firmware (< 1.11.0)
• dell g3 3579 firmware (< 1.13.0)
• dell g3 3779 firmware (< 1.13.0)
• dell g5 15 5500 firmware (< 1.2.1)
• dell g5 15 5590 firmware (< 1.13.2)
• dell g5 5587 firmware (< 1.14.0)
• dell g7 15 7590 firmware (< 1.13.2)
• dell g7 17 7790 firmware (< 1.13.2)
• dell g7 7588 firmware (< 1.14.0)
• dell embedded box pc 5000 firmware (< 1.8.0)
• dell g5 5090 firmware (< 1.3.0)
• dell inspiron 11 2-in-1 3153 firmware (< 1.25.0)
• dell inspiron 11 2-in-1 3158 firmware (< 1.25.0)
• dell inspiron 13 7370 firmware (< 1.17.0)
• dell inspiron 13 2-in-1 5368 firmware (< 1.22.0)
• dell inspiron 13 2-in-1 5378 firmware (< 1.30.0)
• dell inspiron 13 2-in-1 5379 firmware (< 1.14.0)
• dell inspiron 13 2-in-1 7353 firmware (< 1.25.0)
• dell inspiron 13 2-in-1 7359 firmware (< 1.25.0)
• dell inspiron 13 2-in-1 7368 firmware (< 1.22.0)
• dell inspiron 13 2-in-1 7373 firmware (< 1.17.0)
• dell inspiron 13 2-in-1 7378 firmware (< 1.30.0)
• dell inspiron 14 3458 firmware (< a21)
• dell inspiron 14 3459 firmware (< 1.12.0)
• dell inspiron 14 3467 firmware (< 2.12.0)
• dell inspiron 14 3468 firmware (< 1.15.0)
• dell inspiron 14 3473 firmware (< 1.9.0)
• dell inspiron 14 5468 firmware (< 1.12.1)
• dell inspiron 14 5490 firmware (< 1.10.0)
• dell inspiron 14 7460 firmware (< 1.13.2)
• dell inspiron 14 gaming 7466 firmware (< 1.7.0)
• dell inspiron 14 gaming 7467 firmware (< 1.12.1)
• dell inspiron 15 3559 firmware (< 1.12.0)
• dell inspiron 15 3567 firmware (< 2.12.0)
• dell inspiron 15 3568 firmware (< 1.15.0)
• dell inspiron 15 5566 firmware (< 1.12.1)
• dell inspiron 15 5567 firmware (< 1.2.11)
• dell inspiron 15 7560 firmware (< 1.13.2)
• dell inspiron 15 7570 firmware (< 1.17.0)
• dell inspiron 15 7572 firmware (< 1.5.2)
• dell inspiron 15 2-in-1 5568 firmware (< 1.22.0)
• dell inspiron 15 2-in-1 5578 firmware (< 1.30.0)
• dell inspiron 15 2-in-1 5579 firmware (< 1.14.0)
• dell inspiron 15 2-in-1 7568 firmware (< 1.25.0)
• dell inspiron 15 2-in-1 7569 firmware (< 1.22.0)
• dell inspiron 15 2-in-1 7573 firmware (< 1.17.0)
• dell inspiron 15 2-in-1 7579 firmware (< 1.30.0)
• dell inspiron 15 gaming 7566 firmware (< 1.7.0)
• dell inspiron 15 gaming 7567 firmware (< 1.12.1)
• dell inspiron 15 gaming 7577 firmware (< 1.11.0)
• dell inspiron 15-3552 firmware (< a21)
• dell inspiron 17 5767 firmware (< 1.2.11)
• dell inspiron 17 2-in-1 7773 firmware (< 1.14.0)
… and 294 more
Related
References
- https://www.dell.com/support/article/SLN321726 Vendor Advisory
- https://www.dell.com/support/article/SLN321726 Vendor Advisory