CVE-2020-5376: Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may…

medium6.8CVSS 3.1

AVPACLPRNUINSUCHIHAH

Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).

Affected

2 ranges

Vendor	Product	Version range	Fixed in
dell	cpg_bios	>= unspecified < A13	A13
dell	inspiron_7347_bios	< a13	a13