Lucene search

[email protected]CVE-2020-5363

HistoryJun 10, 2020 - 9:15 p.m.

CVE-2020-5363

2020-06-1021:15:11

CWE-158

[email protected]

web.nvd.nist.gov

dell

client

consumer

commercial

platforms

bios

admin password

vulnerability

cve-2020-5363

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.6 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell’s manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS administrator privileges to the device, to gain privileged access to the platform and the hard drive.

Affected configurations

NVD

Node

delllatitude_5300_firmwareRange<1.9.4

AND

delllatitude_5300Match-

Node

delllatitude_5300_2-in-1_firmwareRange<1.9.4

AND

delllatitude_5300_2-in-1Match-

Node

delllatitude_5400_firmwareRange<1.7.4

AND

delllatitude_5400Match-

Node

delllatitude_5401_firmwareRange<1.8.4

AND

delllatitude_5401Match-

Node

delllatitude_5500_firmwareRange<1.7.4

AND

delllatitude_5500Match-

Node

delllatitude_5501_firmwareRange<1.8.4

AND

delllatitude_5501Match-

Node

delllatitude_7200_2_in_1_firmwareRange<1.8.0

AND

delllatitude_7200_2_in_1Match-

Node

delllatitude_7220_firmwareRange<1.6.0

AND

delllatitude_7220Match-

Node

delllatitude_7220ex_rugged_extreme_tablet_firmwareRange<1.6.0

AND

delllatitude_7220ex_rugged_extreme_tabletMatch-

Node

delllatitude_7300_firmwareRange<1.7.4

AND

delllatitude_7300Match-

Node

delllatitude_7400_firmwareRange<1.7.4

AND

delllatitude_7400Match-

Node

dellprecision_3540_firmwareRange<1.7.4

AND

dellprecision_3540Match-

Node

dellprecision_3541_firmwareRange<1.8.4

AND

dellprecision_3541Match-

Node

dellprecision_7540_firmwareRange<1.9.0

AND

dellprecision_7540Match-

Node

dellprecision_7740_firmwareRange<1.9.0

AND

dellprecision_7740Match-

Node

dellxps_13_9300_firmwareRange<1.0.11

AND

dellxps_13_9300Match-

Node

dellxps_7390_2-in-1_firmwareRange<1.4.0

AND

dellxps_7390_2-in-1Match-

Node

dellxps_7590_firmwareRange<1.7.0

AND

dellxps_7590Match-

CPENameOperatorVersion
dell:latitude_5300_firmwaredell latitude 5300 firmwarelt1.9.4

CPE	Name	Operator	Version
dell:latitude_5300_firmware	dell latitude 5300 firmware	lt	1.9.4

CNA Affected

[
  {
    "product": "Dell Client Consumer and Commercial platforms",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "https://www.dell.com/support/article/SLN321604"
      }
    ]
  }
]

References

www.dell.com/support/article/SLN321604

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.6 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2020-5363

prion1 cvelist1 nvd1