Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-5324

Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is limited to the Dell Firmware Update Utility during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged malicious user could exploit this vulnerability by tricking an administrator into overwriting arbitrary files via a symlink attack. The vulnerability does not affect the actual binary payload that the update utility delivers.

Published

2020-02-21T15:15:12.047

Last Modified

2024-11-21T05:33:54.747

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.1 (HIGH)

CVSSv2 Vector

AV:L/AC:H/Au:N/C:N/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: HIGH
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

1.9

Impact Score

4.9

Weaknesses
  • Type: Secondary
    CWE-427
  • Type: Primary
    CWE-59
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System dell g3_3579_firmware < 1.11.0 Yes
Hardware dell g3_3579 - No
Operating System dell g3_3779_firmware < 1.11.0 Yes
Hardware dell g3_3779 - No
Operating System dell g3_15_3590_firmware < 1.9.2 Yes
Hardware dell g3_15_3590 - No
Operating System dell g5_15_5590_firmware < 1.11.1 Yes
Hardware dell g5_15_5590 - No
Operating System dell g5_5090_firmware < 1.1.2 Yes
Hardware dell g5_5090 - No
Operating System dell g5_5587_firmware < 1.12.2 Yes
Hardware dell g5_5587 - No
Operating System dell g7_15_7590_firmware < 1.11.1 Yes
Hardware dell g7_15_7590 - No
Operating System dell g7_17_7790_firmware < 1.11.1 Yes
Hardware dell g7_17_7790 - No
Operating System dell g7_7588_firmware < 1.12.2 Yes
Hardware dell g7_7588 - No
Operating System dell inspiron_14_5490_firmware < 1.4.0 Yes
Hardware dell inspiron_14_5490 - No
Operating System dell inspiron_3480_firmware < 1.7.0 Yes
Hardware dell inspiron_3480 - No
Operating System dell inspiron_3481_firmware < 1.6.0 Yes
Hardware dell inspiron_3481 - No
Operating System dell inspiron_3490_firmware < 1.5.0 Yes
Hardware dell inspiron_3490 - No
Operating System dell inspiron_3493_firmware < 1.4.0 Yes
Hardware dell inspiron_3493 - No
Operating System dell inspiron_3580_firmware < 1.7.0 Yes
Hardware dell inspiron_3580 - No
Operating System dell inspiron_3581_firmware < 1.6.0 Yes
Hardware dell inspiron_3581 - No
Operating System dell inspiron_3583_firmware < 1.7.0 Yes
Hardware dell inspiron_3583 - No
Operating System dell inspiron_3584_firmware < 1.6.0 Yes
Hardware dell inspiron_3584 - No
Operating System dell inspiron_3590_firmware < 1.5.0 Yes
Hardware dell inspiron_3590 - No
Operating System dell inspiron_3593_firmware < 1.4.0 Yes
Hardware dell inspiron_3593 - No
Operating System dell inspiron_3780_firmware < 1.7.0 Yes
Hardware dell inspiron_3780 - No
Operating System dell inspiron_3781_firmware < 1.6.0 Yes
Hardware dell inspiron_3781 - No
Operating System dell inspiron_3790_firmware < 1.5.0 Yes
Hardware dell inspiron_3790 - No
Operating System dell inspiron_3793_firmware < 1.4.0 Yes
Hardware dell inspiron_3793 - No
Operating System dell inspiron_5390_firmware < 1.7.1 Yes
Hardware dell inspiron_5390 - No
Operating System dell inspiron_5391_firmware < 1.3.0 Yes
Hardware dell inspiron_5391 - No
Operating System dell inspiron_5480_firmware < 2.6.1 Yes
Hardware dell inspiron_5480 - No
Operating System dell inspiron_5481_firmware < 2.6.1 Yes
Hardware dell inspiron_5481 - No
Operating System dell inspiron_5482_firmware ≤ 2.6.1 Yes
Hardware dell inspiron_5482 - No
Operating System dell inspiron_5491_firmware < 1.4.0 Yes
Hardware dell inspiron_5491 - No
Operating System dell inspiron_5493_firmware < 1.4.0 Yes
Hardware dell inspiron_5493 - No
Operating System dell inspiron_5494_firmware < 1.5.0 Yes
Hardware dell inspiron_5494 - No
Operating System dell inspiron_5498_firmware < 1.4.0 Yes
Hardware dell inspiron_5498 - No
Operating System dell inspiron_5580_firmware < 2.6.1 Yes
Hardware dell inspiron_5580 - No
Operating System dell inspiron_5582_firmware < 2.6.1 Yes
Hardware dell inspiron_5582 - No
Operating System dell inspiron_5583_firmware < 1.9.1 Yes
Hardware dell inspiron_5583 - No
Operating System dell inspiron_5584_firmware < 1.9.1 Yes
Hardware dell inspiron_5584 - No
Operating System dell inspiron_5590_firmware < 1.4.0 Yes
Hardware dell inspiron_5590 - No
Operating System dell inspiron_5591_firmware < 1.4.0 Yes
Hardware dell inspiron_5591 - No
Operating System dell inspiron_5593_firmware < 1.4.0 Yes
Hardware dell inspiron_5593 - No
Operating System dell inspiron_5594_firmware < 1.5.0 Yes
Hardware dell inspiron_5594 - No
Operating System dell inspiron_5598_firmware < 1.4.0 Yes
Hardware dell inspiron_5598 - No
Operating System dell inspiron_7380_firmware < 1.10.0 Yes
Hardware dell inspiron_7380 - No
Operating System dell inspiron_7386_firmware < 1.7.0 Yes
Hardware dell inspiron_7386 - No
Operating System dell inspiron_7390_firmware < 1.7.1 Yes
Hardware dell inspiron_7390 - No
Operating System dell inspiron_7391_firmware < 1.3.0 Yes
Hardware dell inspiron_7391 - No
Operating System dell inspiron_7490_firmware < 1.2.1 Yes
Hardware dell inspiron_7490 - No
Operating System dell inspiron_7580_firmware < 1.10.0 Yes
Hardware dell inspiron_7580 - No
Operating System dell inspiron_7586_firmware < 1.7.0 Yes
Hardware dell inspiron_7586 - No
Operating System dell inspiron_7590_firmware < 1.5.1 Yes
Hardware dell inspiron_7590 - No
Operating System dell inspiron_7591_firmware < 1.5.1 Yes
Hardware dell inspiron_7591 - No
Operating System dell inspiron_7786_firmware < 1.7.0 Yes
Hardware dell inspiron_7786 - No
Operating System dell inspiron_7791_firmware < 1.3.1 Yes
Hardware dell inspiron_7791 - No
Operating System dell latitude_3301_firmware < 1.7.0 Yes
Hardware dell latitude_3301 - No
Operating System dell latitude_3300_firmware < 1.7.2 Yes
Hardware dell latitude_3300 - No
Operating System dell latitude_3311_firmware < 1.3.0 Yes
Hardware dell latitude_3311 - No
Operating System dell latitude_3390_firmware < 1.12.0 Yes
Hardware dell latitude_3390 - No
Operating System dell latitude_3400_firmware < 1.9.2 Yes
Hardware dell latitude_3400 - No
Operating System dell latitude_3490_firmware < 1.11.0 Yes
Hardware dell latitude_3490 - No
Operating System dell latitude_3500_firmware < 1.9.2 Yes
Hardware dell latitude_3500 - No
Operating System dell latitude_3590_firmware < 1.11.0 Yes
Hardware dell latitude_3590 - No
Operating System dell latitude_5290_firmware < 1.12.1 Yes
Hardware dell latitude_5290 - No
Operating System dell latitude_5300_firmware < 1.7.2 Yes
Hardware dell latitude_5300 - No
Operating System dell latitude_5400_firmware < 1.6.3 Yes
Hardware dell latitude_5400 - No
Operating System dell latitude_5401_firmware < 1.6.1 Yes
Hardware dell latitude_5401 - No
Operating System dell latitude_5420_rugged_firmware < 1.8.5 Yes
Hardware dell latitude_5420_rugged - No
Operating System dell latitude_5424_rugged_firmware < 1.8.5 Yes
Hardware dell latitude_5424_rugged - No
Operating System dell latitude_5490_firmware < 1.12.1 Yes
Hardware dell latitude_5490 - No
Operating System dell latitude_5491_firmware < 1.11.1 Yes
Hardware dell latitude_5491 - No
Operating System dell latitude_5500_firmware < 1.6.3 Yes
Hardware dell latitude_5500 - No
Operating System dell latitude_5501_firmware < 1.6.1 Yes
Hardware dell latitude_5501 - No
Operating System dell latitude_5590_firmware < 1.12.1 Yes
Hardware dell latitude_5590 - No
Operating System dell latitude_5591_firmware < 1.11.1 Yes
Hardware dell latitude_5591 - No
Operating System dell latitude_7200_firmware < 1.6.2 Yes
Hardware dell latitude_7200 - No
Operating System dell latitude_7220_rugged_extreme_tablet_firmware < 1.3.1 Yes
Hardware dell latitude_7220_rugged_extreme_tablet - No
Operating System dell latitude_7220ex_rugged_extreme_tablet_firmware < 1.3.1 Yes
Hardware dell latitude_7220ex_rugged_extreme_tablet - No
Operating System dell latitude_7290_firmware < 1.13.1 Yes
Hardware dell latitude_7290 - No
Operating System dell latitude_7300_firmware < 1.6.1 Yes
Hardware dell latitude_7300 - No
Operating System dell latitude_7390_firmware < 1.13.1 Yes
Hardware dell latitude_7390 - No
Operating System dell latitude_7400_firmware < 1.6.1 Yes
Hardware dell latitude_7400 - No
Operating System dell latitude_7424_rugged_extreme_firmware < 1.8.5 Yes
Hardware dell latitude_7424_rugged_extreme - No
Operating System dell latitude_7490_firmware < 1.13.1 Yes
Hardware dell latitude_7490 - No
Operating System dell precision_3530_firmware < 1.11.1 Yes
Hardware dell precision_3530 - No
Operating System dell precision_3540_firmware < 1.6.3 Yes
Hardware dell precision_3540 - No
Operating System dell precision_3541_firmware < 1.6.1 Yes
Hardware dell precision_3541 - No
Operating System dell precision_5530_firmware < 1.14.0 Yes
Hardware dell precision_5530 - No
Operating System dell precision_5540_firmware < 1.6.3 Yes
Hardware dell precision_5540 - No
Operating System dell precision_7530_firmware < 1.12.1 Yes
Hardware dell precision_7530 - No
Operating System dell precision_7540_firmware < 1.5.1 Yes
Hardware dell precision_7540 - No
Operating System dell precision_7730_firmware < 1.12.1 Yes
Hardware dell precision_7730 - No
Operating System dell precision_7740_firmware < 1.5.1 Yes
Hardware dell precision_7740 - No
Operating System dell vostro_15_7580_firmware < 1.12.2 Yes
Hardware dell vostro_15_7580 - No
Operating System dell vostro_3480_firmware < 1.7.0 Yes
Hardware dell vostro_3480 - No
Operating System dell vostro_3481_firmware < 1.6.0 Yes
Hardware dell vostro_3481 - No
Operating System dell vostro_3490_firmware < 1.5.0 Yes
Hardware dell vostro_3490 - No
Operating System dell vostro_3580_firmware < 1.7.0 Yes
Hardware dell vostro_3580 - No
Operating System dell vostro_3581_firmware < 1.6.0 Yes
Hardware dell vostro_3581 - No
Operating System dell vostro_3583_firmware < 1.7.0 Yes
Hardware dell vostro_3583 - No
Operating System dell vostro_3584_firmware < 1.6.0 Yes
Hardware dell vostro_3584 - No
Operating System dell vostro_3590_firmware < 1.5.0 Yes
Hardware dell vostro_3590 - No
Operating System dell vostro_5390_firmware < 1.7.1 Yes
Hardware dell vostro_5390 - No
Operating System dell vostro_5391_firmware < 1.3.0 Yes
Hardware dell vostro_5391 - No
Operating System dell vostro_5481_firmware < 2.6.1 Yes
Hardware dell vostro_5481 - No
Operating System dell vostro_5490_firmware < 1.4.0 Yes
Hardware dell vostro_5490 - No
Operating System dell vostro_5581_firmware < 2.6.1 Yes
Hardware dell vostro_5581 - No
Operating System dell vostro_5590_firmware < 1.4.0 Yes
Hardware dell vostro_5590 - No
Operating System dell vostro_7590_firmware < 1.5.1 Yes
Hardware dell vostro_7590 - No
Operating System dell wyse_5070_thin_client_firmware < 1.4.2 Yes
Hardware dell wyse_5070_thin_client - No
Operating System dell wyse_5470_firmware < 1.2.1 Yes
Hardware dell wyse_5470 - No
Operating System dell xps_13_9380_firmware < 1.9.1 Yes
Hardware dell xps_13_9380 - No
Operating System dell xps_15_9575_firmware < 1.10.0 Yes
Hardware dell xps_15_9575 - No
Operating System dell xps_15_7590_firmware < 1.4.0 Yes
Hardware dell xps_15_7590 - No
Operating System dell xps_15_9570_firmware < 1.14.0 Yes
Hardware dell xps_15_9570 - No
References