CVE-2020-5388

published 2020-11-10

CVE-2020-5388: Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. A local authenticated…

medium 6.9 CVSS 3.1

AV P AC H PR H UI N S C C H I H A H

Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
dell	cpg_bios	>= unspecified < 1.31.0	1.31.0
dell	inspiron_15_7579_firmware	< 1.31.0	1.31.0

CWE-119