CVE-2020-5379

published 2020-09-02

CVE-2020-5379: Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may…

medium 6.8 CVSS 3.1

AV P AC L PR N UI N S U C H I H A H

Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).

Affected

2 ranges

Vendor	Product	Version range	Fixed in
dell	cpg_bios	>= unspecified < A12	A12
dell	inspiron_7352_bios	< a12	a12

CWE-693