CVE-2020-5362: Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized…

PriorityP419medium4.4CVSS 3.1

AVLACLPRHUINSUCNIHAN

EPSS

0.29%

21.0th percentile

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values.

Affected

354 ranges· showing 25

Vendor	Product	Version range	Fixed in
dell	chengming_3967_firmware	< 1.9.0	1.9.0
dell	chengming_3977_firmware	< 1.9.0	1.9.0
dell	chengming_3980_firmware	< 2.16.0	2.16.0
dell	chengming_3988_firmware	< 1.3.0	1.3.0
dell	chengming_3990_firmware	< 1.1.3	1.1.3
dell	chengming_3991_firmware	< 1.1.3	1.1.3
dell	dell_client_consumer_and_commercial_platforms	—	—
dell	embedded_box_pc_5000_firmware	< 1.8.0	1.8.0
dell	g3_15_3500_firmware	< 1.2.1	1.2.1
dell	g3_15_3590_firmware	< 1.11.0	1.11.0
dell	g3_3579_firmware	< 1.13.0	1.13.0
dell	g3_3779_firmware	< 1.13.0	1.13.0
dell	g5_15_5500_firmware	< 1.2.1	1.2.1
dell	g5_15_5590_firmware	< 1.13.2	1.13.2
dell	g5_5090_firmware	< 1.3.0	1.3.0
dell	g5_5587_firmware	< 1.14.0	1.14.0
dell	g7_15_7590_firmware	< 1.13.2	1.13.2
dell	g7_17_7790_firmware	< 1.13.2	1.13.2
dell	g7_7588_firmware	< 1.14.0	1.14.0
dell	inspiron_11_2-in-1_3153_firmware	< 1.25.0	1.25.0
dell	inspiron_11_2-in-1_3158_firmware	< 1.25.0	1.25.0
dell	inspiron_13_2-in-1_5368_firmware	< 1.22.0	1.22.0
dell	inspiron_13_2-in-1_5378_firmware	< 1.30.0	1.30.0
dell	inspiron_13_2-in-1_5379_firmware	< 1.14.0	1.14.0
dell	inspiron_13_2-in-1_7353_firmware	< 1.25.0	1.25.0

CVSS provenance

nvdv3.14.4MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.