Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-5363

Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS administrator privileges to the device, to gain privileged access to the platform and the hard drive.

Published

2020-06-10T21:15:11.037

Last Modified

2024-11-21T05:34:00.153

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.6 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Secondary
    CWE-158
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System dell latitude_5300_firmware < 1.9.4 Yes
Hardware dell latitude_5300 - No
Operating System dell latitude_5300_2-in-1_firmware < 1.9.4 Yes
Hardware dell latitude_5300_2-in-1 - No
Operating System dell latitude_5400_firmware < 1.7.4 Yes
Hardware dell latitude_5400 - No
Operating System dell latitude_5401_firmware < 1.8.4 Yes
Hardware dell latitude_5401 - No
Operating System dell latitude_5500_firmware < 1.7.4 Yes
Hardware dell latitude_5500 - No
Operating System dell latitude_5501_firmware < 1.8.4 Yes
Hardware dell latitude_5501 - No
Operating System dell latitude_7200_2_in_1_firmware < 1.8.0 Yes
Hardware dell latitude_7200_2_in_1 - No
Operating System dell latitude_7220_firmware < 1.6.0 Yes
Hardware dell latitude_7220 - No
Operating System dell latitude_7220ex_rugged_extreme_tablet_firmware < 1.6.0 Yes
Hardware dell latitude_7220ex_rugged_extreme_tablet - No
Operating System dell latitude_7300_firmware < 1.7.4 Yes
Hardware dell latitude_7300 - No
Operating System dell latitude_7400_firmware < 1.7.4 Yes
Hardware dell latitude_7400 - No
Operating System dell precision_3540_firmware < 1.7.4 Yes
Hardware dell precision_3540 - No
Operating System dell precision_3541_firmware < 1.8.4 Yes
Hardware dell precision_3541 - No
Operating System dell precision_7540_firmware < 1.9.0 Yes
Hardware dell precision_7540 - No
Operating System dell precision_7740_firmware < 1.9.0 Yes
Hardware dell precision_7740 - No
Operating System dell xps_13_9300_firmware < 1.0.11 Yes
Hardware dell xps_13_9300 - No
Operating System dell xps_7390_2-in-1_firmware < 1.4.0 Yes
Hardware dell xps_7390_2-in-1 - No
Operating System dell xps_7590_firmware < 1.7.0 Yes
Hardware dell xps_7590 - No
References