Vulnerability · Published Jun 10, 2020 · Assigned by dell
CVE-2020-5362
High 7.1
In plain English
A high-severity security flaw in Dell Client Consumer and Commercial platforms from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.3%top 78.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dell | Dell Client Consumer and Commercial platforms | https://www.dell.com/support/article/SLN321726 |
Weakness: CWE-285 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:H
References
- https://www.dell.com/support/article/SLN321726 x_refsource_MISC