Lucene search

[email protected]CVE-2020-5326

HistoryFeb 21, 2020 - 3:15 p.m.

CVE-2020-5326

2020-02-2115:15:12

CWE-306

[email protected]

web.nvd.nist.gov

cve-2020-5326

dell

client platforms

bios

setup

authentication bypass

vulnerability

irst manager

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.2%

JSON

Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology (iRST) Manager menu. An attacker with physical access to the system could perform unauthorized changes to the BIOS Setup configuration settings without requiring the BIOS Admin password by selecting the Optimized Defaults option in the pre-boot iRST Manager.

Affected configurations

NVD

Node

dellchengming_3980_firmwareRange<2.13.0

AND

dellchengming_3980Match-

Node

dellg3_3579_firmwareRange<1.10.0

AND

dellg3_3579Match-

Node

dellg3_3590_firmwareRange<1.4.3

AND

dellg3_3590Match-

Node

dellg3_3779_firmwareRange<1.10.0

AND

dellg3_3779Match-

Node

dellg5_5587_firmwareRange<1.11.1

AND

dellg5_5587Match-

Node

dellg5_5590_firmwareRange<1.8.0

AND

dellg5_5590Match-

Node

dellg7_7588_firmwareRange<1.11.1

AND

dellg7_7588Match-

Node

dellg7_7590_firmwareRange<1.8.0

AND

dellg7_7590Match-

Node

dellg7_7790_firmwareRange<1.8.0

AND

dellg7_7790Match-

Node

dellembedded_box_pc_5000Match-

AND

dellembedded_box_pc_5000_firmwareRange<1.6.0

Node

dellinspiron_14_gaming_7466Match-

AND

dellinspiron_14_gaming_7466_firmwareRange<1.5.0

Node

dellinspiron_14_gaming_7467Match-

AND

dellinspiron_14_gaming_7467_firmwareRange<1.10.0

Node

dellinspiron_15_7572Match-

AND

dellinspiron_15_7572_firmwareRange<1.2.1

Node

dellinspiron_15_gaming_7566Match-

AND

dellinspiron_15_gaming_7566_firmwareRange<1.5.0

Node

dellinspiron_15_gaming_7567Match-

AND

dellinspiron_15_gaming_7567_firmwareRange<1.10.0

Node

dellinspiron_15_gaming_7577Match-

AND

dellinspiron_15_gaming_7577_firmwareRange<1.8.0

Node

dellinspiron_3470Match-

AND

dellinspiron_3470_firmwareRange<2.13.0

Node

dellinspiron_3480_firmwareRange<1.5.1

AND

dellinspiron_3480Match-

Node

dellinspiron_3481_firmwareRange<1.4.0

AND

dellinspiron_3481Match-

Node

dellinspiron_3580_firmwareRange<1.5.1

AND

dellinspiron_3580Match-

Node

dellinspiron_3581_firmwareRange<1.4.0

AND

dellinspiron_3581Match-

Node

dellinspiron_3583_firmwareRange<1.5.1

AND

dellinspiron_3583Match-

Node

dellinspiron_3584_firmwareRange<1.4.0

AND

dellinspiron_3584Match-

Node

dellinspiron_3670_firmwareRange<2.13.0

AND

dellinspiron_3670Match-

Node

dellinspiron_3780_firmwareRange<1.5.1

AND

dellinspiron_3780Match-

Node

dellinspiron_3781_firmwareRange<1.4.0

AND

dellinspiron_3781Match-

Node

dellinspiron_5370_firmwareRange<1.12.0

AND

dellinspiron_5370Match-

Node

dellinspiron_5480_firmwareRange<2.4.0

AND

dellinspiron_5480Match-

Node

dellinspiron_5481_firmwareRange<2.4.0

AND

dellinspiron_5481Match-

Node

dellinspiron_5482_firmwareRange<2.4.0

AND

dellinspiron_5482Match-

Node

dellinspiron_5488_firmwareRange<2.4.0

AND

dellinspiron_5488Match-

Node

dellinspiron_5570_firmwareRange<1.2.3

AND

dellinspiron_5570Match-

Node

dellinspiron_5580_firmwareRange<2.4.0

AND

dellinspiron_5580Match-

Node

dellinspiron_5582_firmwareRange<2.4.0

AND

dellinspiron_5582Match-

Node

dellinspiron_5770_firmwareRange<1.2.3

AND

dellinspiron_5770Match-

Node

dellinspiron_7380_firmwareRange<1.8.0

AND

dellinspiron_7380Match-

Node

dellinspiron_7386_firmwareRange<1.5.0

AND

dellinspiron_7386Match-

Node

dellinspiron_7472_firmwareRange<1.2.1

AND

dellinspiron_7472Match-

Node

dellinspiron_7580_firmwareRange<1.8.0

AND

dellinspiron_7580Match-

Node

dellinspiron_7586_firmwareRange<1.5.0

AND

dellinspiron_7586Match-

Node

dellinspiron_7590_firmwareRange<1.1.1

AND

dellinspiron_7590Match-

Node

dellinspiron_7591_firmwareRange<1.1.1

AND

dellinspiron_7591Match-

Node

dellinspiron_7786_firmwareRange<1.5.0

AND

dellinspiron_7786Match-

Node

delllatitude_3300_firmwareRange<1.4.0

AND

delllatitude_3300Match-

Node

delllatitude_3460_firmwareRange<a17

AND

delllatitude_3460Match-

Node

delllatitude_3480_firmwareRange<1.12.0

AND

delllatitude_3480Match-

Node

delllatitude_3490_firmwareRange<1.9.9

AND

delllatitude_3490Match-

Node

delllatitude_3580_firmwareRange<1.12.0

AND

delllatitude_3580Match-

Node

delllatitude_3590_firmwareRange<1.9.9

AND

delllatitude_3590Match-

Node

delllatitude_5175_firmwareRange<1.7.1

AND

delllatitude_5175Match-

Node

delllatitude_5179_firmwareRange<1.7.1

AND

delllatitude_5179Match-

Node

delllatitude_5280_firmwareRange<1.15.1

AND

delllatitude_5280Match-

Node

delllatitude_5288_firmwareRange<1.15.1

AND

delllatitude_5288Match-

Node

delllatitude_5289_firmwareRange<1.18.1

AND

delllatitude_5289Match-

Node

delllatitude_5290_firmwareRange<1.9.0

AND

delllatitude_5290Match-

Node

delllatitude_5300_firmwareRange<1.3.1

AND

delllatitude_5300Match-

Node

delllatitude_5400_firmwareRange<1.3.11

AND

delllatitude_5400Match-

Node

delllatitude_5401_firmwareRange<1.3.11

AND

delllatitude_5401Match-

Node

delllatitude_5414_firmwareRange<1.24.0

AND

delllatitude_5414Match-

Node

delllatitude_5420_rugged_firmwareRange<1.5.0

AND

delllatitude_5420_ruggedMatch-

Node

delllatitude_5424_rugged_firmwareRange<1.5.0

AND

delllatitude_5424_ruggedMatch-

Node

delllatitude_5480_firmwareRange<1.15.1

AND

delllatitude_5480Match-

Node

delllatitude_5488_firmwareRange<1.15.1

AND

delllatitude_5488Match-

Node

delllatitude_5490_firmwareRange<1.9.0

AND

delllatitude_5490Match-

Node

delllatitude_5491_firmwareRange<1.8.1

AND

delllatitude_5491Match-

Node

delllatitude_5500_firmwareRange<1.3.11

AND

delllatitude_5500Match-

Node

delllatitude_5501_firmwareRange<1.2.11

AND

delllatitude_5501Match-

Node

delllatitude_5580_firmwareRange<1.15.1

AND

delllatitude_5580Match-

Node

delllatitude_5590_firmwareRange<1.9.0

AND

delllatitude_5590Match-

Node

delllatitude_5591_firmwareRange<1.8.1

AND

delllatitude_5591Match-

Node

delllatitude_7202_firmwareRange<a24

AND

delllatitude_7202Match-

Node

delllatitude_7212_firmwareRange<1.26.0

AND

delllatitude_7212Match-

Node

delllatitude_7214_firmwareRange<1.24.0

AND

delllatitude_7214Match-

Node

delllatitude_7275_firmwareRange<1.6.1

AND

delllatitude_7275Match-

Node

delllatitude_7280_firmwareRange<1.15.1

AND

delllatitude_7280Match-

Node

delllatitude_7285_firmwareRange<1.4.1

AND

delllatitude_7285Match-

Node

delllatitude_7290_firmwareRange<1.10.0

AND

delllatitude_7290Match-

Node

delllatitude_7300_firmwareRange<1.3.11

AND

delllatitude_7300Match-

Node

delllatitude_7370_firmwareRange<1.18.5

AND

delllatitude_7370Match-

Node

delllatitude_7380_firmwareRange<1.15.1

AND

delllatitude_7380Match-

Node

delllatitude_7389_firmwareRange<1.18.1

AND

delllatitude_7389Match-

Node

delllatitude_7390_firmwareRange<1.10.0

AND

delllatitude_7390Match-

Node

delllatitude_7400_firmwareRange<1.3.11

AND

delllatitude_7400Match-

Node

delllatitude_7414_firmwareRange<1.24.0

AND

delllatitude_7414Match-

Node

delllatitude_7424_rugged_extreme_firmwareRange<1.5.0

AND

delllatitude_7424_rugged_extremeMatch-

Node

delllatitude_7480_firmwareRange<1.15.1

AND

delllatitude_7480Match-

Node

delllatitude_7490_firmwareRange<1.10.0

AND

delllatitude_7490Match-

Node

delllatitude_e5270_firmwareRange<1.21.4

AND

delllatitude_e5270Match-

Node

delllatitude_e5470_firmwareRange<1.21.4

AND

delllatitude_e5470Match-

Node

delllatitude_e5570_firmwareRange<1.21.4

AND

delllatitude_e5570Match-

Node

delllatitude_e7270_firmwareRange<1.22.8

AND

delllatitude_e7270Match-

Node

delllatitude_e7470_firmwareRange<1.22.8

AND

delllatitude_e7470Match-

Node

delloptiplex_3040_firmwareRange<1.11.3

AND

delloptiplex_3040Match-

Node

delloptiplex_3046_firmwareRange<1.8.2

AND

delloptiplex_3046Match-

Node

delloptiplex_3050_firmwareRange<1.12.1

AND

delloptiplex_3050Match-

Node

delloptiplex_3060_firmwareRange<1.4.2

AND

delloptiplex_3060Match-

Node

delloptiplex_3070_firmwareRange<1.0.3

AND

delloptiplex_3070Match-

Node

delloptiplex_3240_firmwareRange<1.8.1

AND

delloptiplex_3240Match-

Node

delloptiplex_5040_firmwareRange<1.14.5

AND

delloptiplex_5040Match-

Node

delloptiplex_5050_firmwareRange<1.12.1

AND

delloptiplex_5050Match-

Node

delloptiplex_5060_firmwareRange<1.4.2

AND

delloptiplex_5060Match-

Node

delloptiplex_5070_firmwareRange<1.0.3

AND

delloptiplex_5070Match-

Node

delloptiplex_5250_firmwareRange<1.13.1

AND

delloptiplex_5250Match-

Node

delloptiplex_5260_firmwareRange<1.7.3

AND

delloptiplex_5260Match-

Node

delloptiplex_7040_firmwareRange<1.15.5

AND

delloptiplex_7040Match-

Node

delloptiplex_7050_firmwareRange<1.12.1

AND

delloptiplex_7050Match-

Node

delloptiplex_7060_firmwareRange<1.4.2

AND

delloptiplex_7060Match-

Node

delloptiplex_7070_firmwareRange<1.0.3

AND

delloptiplex_7070Match-

Node

delloptiplex_7440_firmwareRange<1.11.1

AND

delloptiplex_7440Match-

Node

delloptiplex_7450_firmwareRange<1.13.1

AND

delloptiplex_7450Match-

Node

delloptiplex_7460_firmwareRange<1.7.3

AND

delloptiplex_7460Match-

Node

delloptiplex_7760_firmwareRange<1.7.3

AND

delloptiplex_7760Match-

Node

delloptiplex_5270_firmwareRange<1.1.1

AND

delloptiplex_5270Match-

Node

delloptiplex_7470_firmwareRange<1.1.1

AND

delloptiplex_7470Match-

Node

delloptiplex_7770_firmwareRange<1.1.1

AND

delloptiplex_7770Match-

Node

delloptiplex_xe3_firmwareRange<1.4.2

AND

delloptiplex_xe3Match-

Node

dellprecision_3420_firmwareRange<2.13.1

AND

dellprecision_3420Match-

Node

dellprecision_3430_firmwareRange<1.4.2

AND

dellprecision_3430Match-

Node

dellprecision_3510_firmwareRange<1.21.4

AND

dellprecision_3510Match-

Node

dellprecision_3520_firmwareRange<1.15.1

AND

dellprecision_3520Match-

Node

dellprecision_3530_firmwareRange<1.8.1

AND

dellprecision_3530Match-

Node

dellprecision_3540_firmwareRange<1.3.11

AND

dellprecision_3540Match-

Node

dellprecision_3541_firmwareRange<1.2.11

AND

dellprecision_3541Match-

Node

dellprecision_3620_firmwareRange<2.13.1

AND

dellprecision_3620Match-

Node

dellprecision_3630_firmwareRange<1.2.0

AND

dellprecision_3630Match-

Node

dellprecision_3930_firmwareRange<2.2.0

AND

dellprecision_3930Match-

Node

dellprecision_5510_firmwareRange<1.12.0

AND

dellprecision_5510Match-

Node

dellprecision_5520_firmwareRange<1.15.0

AND

dellprecision_5520Match-

Node

dellprecision_5530_firmwareRange<1.11.2

AND

dellprecision_5530Match-

Node

dellprecision_5720_firmwareRange<2.5.1

AND

dellprecision_5720Match-

Node

dellprecision_5810_firmwareRange<a31

AND

dellprecision_5810Match-

Node

dellprecision_5820_firmwareRange<1.11.1

AND

dellprecision_5820Match-

Node

dellprecision_7510_firmwareRange<1.18.5

AND

dellprecision_7510Match-

Node

dellprecision_7520_firmwareRange<1.15.1

AND

dellprecision_7520Match-

Node

dellprecision_7530_firmwareRange<1.9.0

AND

dellprecision_7530Match-

Node

dellprecision_7540_firmwareRange<1.1.3

AND

dellprecision_7540Match-

Node

dellprecision_7710_firmwareRange<1.18.5

AND

dellprecision_7710Match-

Node

dellprecision_7720_firmwareRange<1.15.1

AND

dellprecision_7720Match-

Node

dellprecision_7730_firmwareRange<1.9.0

AND

dellprecision_7730Match-

Node

dellprecision_7740_firmwareRange<1.1.3

AND

dellprecision_7740Match-

Node

dellprecision_7810_firmwareRange<a31

AND

dellprecision_7810Match-

Node

dellprecision_7820_firmwareRange<2.0.5

AND

dellprecision_7820Match-

Node

dellprecision_7910_firmwareRange≤a31

AND

dellprecision_7910Match-

Node

dellprecision_7920_firmwareRange<2.0.5

AND

dellprecision_7920Match-

Node

dellprecision_3431_firmwareRange<1.0.3

AND

dellprecision_3431Match-

Node

dellvostro_7580_firmwareRange<1.11.1

AND

dellvostro_7580Match-

Node

dellvostro_15_7570_firmwareRange<1.8.0

AND

dellvostro_15_7570Match-

Node

dellvostro_3070_firmwareRange<2.13.0

AND

dellvostro_3070Match-

Node

dellvostro_3470_firmwareRange<2.13.0

AND

dellvostro_3470Match-

Node

dellvostro_3480_firmwareRange<1.5.1

AND

dellvostro_3480Match-

Node

dellvostro_3481_firmwareRange<1.4.0

AND

dellvostro_3481Match-

Node

dellvostro_3580_firmwareRange<1.5.1

AND

dellvostro_3580Match-

Node

dellvostro_3581_firmwareRange<1.4.0

AND

dellvostro_3581Match-

Node

dellvostro_3583_firmwareRange<1.5.1

AND

dellvostro_3583Match-

Node

dellvostro_3584_firmwareRange<1.4.0

AND

dellvostro_3584Match-

Node

dellvostro_3670_firmwareRange<2.13.0

AND

dellvostro_3670Match-

Node

dellvostro_5370_firmwareRange<1.12.0

AND

dellvostro_5370Match-

Node

dellvostro_5471_firmwareRange<1.12.0

AND

dellvostro_5471Match-

Node

dellvostro_5481_firmwareRange<2.4.0

AND

dellvostro_5481Match-

Node

dellvostro_5581_firmwareRange<2.4.0

AND

dellvostro_5581Match-

Node

dellvostro_7590_firmwareRange<1.1.1

AND

dellvostro_7590Match-

Node

dellwyse_5070_firmwareRange<1.2.4

AND

dellwyse_5070Match-

Node

dellwyse_7040_firmwareRange<1.6.0

AND

dellwyse_7040Match-

Node

dellxps_12_9250_firmwareRange<1.6.1

AND

dellxps_12_9250Match-

Node

dellxps_13_9343_firmwareRange<a20

AND

dellxps_13_9343Match-

Node

dellxps_13_9350_firmwareRange<1.11.1

AND

dellxps_13_9350Match-

Node

dellxps_13_9360_firmwareRange<2.12.0

AND

dellxps_13_9360Match-

Node

dellxps_13_9380_firmwareRange<1.4.0

AND

dellxps_13_9380Match-

Node

dellxps_15_9550_firmwareRange<1.12.0

AND

dellxps_15_9550Match-

Node

dellxps_15_9560_firmwareRange<1.15.0

AND

dellxps_15_9560Match-

Node

dellxps_15_9575_firmwareRange<1.6.1

AND

dellxps_15_9575Match-

Node

dellxps_15_9570_firmwareRange<1.11.2

AND

dellxps_15_9570Match-

Node

dellxps_27_7760_firmwareRange<2.5.1

AND

dellxps_27_7760Match-

Node

dellxps_8900_firmwareRange<2.6.1

AND

dellxps_8900Match-

CPENameOperatorVersion
dell:chengming_3980_firmwaredell chengming 3980 firmwarelt2.13.0

CPE	Name	Operator	Version
dell:chengming_3980_firmware	dell chengming 3980 firmware	lt	2.13.0

CNA Affected

[
  {
    "product": "Dell Client Consumer and Commercial Platforms",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "https://www.dell.com/support/article/SLN320337"
      }
    ]
  }
]

References

www.dell.com/support/article/SLN320337

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.2%

JSON

Related for CVE-2020-5326

cvelist1 prion1 nvd1